European Grid Infrastructure EGI Trust Anchor release 1.133         2025.02.17

------------------------------------------------------------------------------
For DOCUMENTATION on using EGI Trust Anchors see HOWTO01: https://edu.nl/envyq
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.133-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.133-1" (new installs) and "lcg-CA-1.133-1"
(for sites upgrading from EGEE/JSPG releases).

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.132 to 1.133
---------------------------
(17 February 2024)

* Updated re-issued GridCanada root with extended validity period (CA)
* Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA 
  and private trust roots (EU)
* updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
* MARGI put on hold due to domainname resolution issues (MK)

IMPORTANT NOTICE:
In the  future releases we will move to a NEW RSA-2048 GPG PACKAGE SIGNING
key. The new public key file, GPG-KEY-EUGridPMA-RPM-4, is distributed with
this and subsequent releases. You can retrieve the new public key file from
  https://dl.igtf.net/distribution/GPG-KEY-EUGridPMA-RPM-4
Ensure this key is installed now as a trusted key for package signing!

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Please review the documentation for the new software that will be needed
to support differentiated assurance and the Collaborative Assurance Model.
We ask for your support in implementing the requisite changes, and deploy
new trust anchor meta-packages and the new local policies only in unison.

Version information: ca-policy-egi-core = 1.133-1