Index of /distribution/egi-1.62-1/ca-policy-egi-core-1.62-1

[ICO]NameLast modifiedSize

[PARENTDIR]Parent Directory  -
[DIR]RPMS.production/2015-02-18 10:02 -
[DIR]RPMS/2015-02-18 10:02 -
[DIR]SRPMS/2015-02-18 10:02 -
[DIR]dists/2015-02-18 10:02 -
[DIR]headers/2015-02-18 10:02 -
[DIR]meta/2015-02-18 10:02 -
[DIR]repo-files/2015-02-18 10:02 -
[DIR]repodata/2015-02-18 10:02 -
[DIR]tgz/2015-02-18 10:02 -
[   ]GPG-KEY-EUGridPMA-RPM-32015-02-18 10:02 889
[TXT]ca-policy-egi-core.list2015-02-18 10:03 2.8K
[TXT]release.xml2015-02-18 10:03 77


European Grid Infrastructure EGI Trust Anchor release 1.62          2015.02.23

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

       *** IMPORTANT NOTICE FOR EGI VOMS SERVER INSTALLATIONS ***

  Several updates to this trust anchor distribution incorporate changes to
  the name of the issuing authority, but the name of the end-entities and
  the users remains exactly the same. To make the change transparent, all
  operators of VOMS and VOMS-Admin services are requested to enable the
  subject-only name resolution mechanisms in VOMS and VOMS Admin:

  - on the VOMS core Attribute Authority service, configure the "-skipcacheck"
    flag on start-up. In YAIM this is done by setting "VOMS_SKIP_CA_CHECK"
    to true. See https://wiki.italiangrid.it/twiki/bin/view/VOMS/VOMSYAIMGuide
  - update VOMS-Admin to version >= 3.3.2, and set "voms.skip_ca_check=True" 
    in the service properties. For more info, read the release notes at 
    http://italiangrid.github.io/voms/release-notes/voms-admin-server/3.3.2/
    
       *** END IMPORTANT NOTICE FOR EGI VOMS SERVER INSTALLATIONS ***

Modifications compared to the previous release:
* updated to IGTF Accredited CA distribution version 1.62-1 Classic, SLCS and 
  MICS profiles, encoded in meta-package "ca-policy-egi-core-1.62-1" (for new 
  installs) and "lcg-CA-1.62-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu.  See documentation
  for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages,  according to
  your  policies.   Note that  your organisation or  NGI may have  a specific 
  policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar 
as pertinent to this release.  More information can be found in the 
EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.61 to 1.62
-------------------------
(23 February 2015)

* Added Root CA 2 for NIIF (HU)
* Extended life time for pkIRISGrid CA (ES)
* Updated DigiCert root CA meta-data in preparation for TCS (US)
* Included GEANT TCS CA G3 trust anchors (EU)
* Temporarily suspended HIAST/74c6eaeb for operational reasons (SY)
* Discontinued ULAGrid-CA-2008 CA (VE)
* Discontinued NCHC CA (TW)

The CA modifications, encoded in both "requires" and "obsoletes" clauses, have
been incorporated in the above-mentioned meta-package RPMs. This trust anchor 
release is best enjoyed with fetch-crl v3 or better, available from popular 
GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.62-1