Index of /distribution/egi-1.82-1/ca-policy-egi-core-1.82-1
European Grid Infrastructure EGI Trust Anchor release 1.82 2017.03.27
------------------------------------------------------------------------------
For release DOCUMENTATION available on this EGI Trust Anchor release see
https://wiki.egi.eu/wiki/EGI_IGTF_Release
------------------------------------------------------------------------------
This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.82-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.82-1" (new installs) and "lcg-CA-1.82-1"
(for sites upgrading from EGEE/JSPG releases).
IMPORTANT NOTICE:
Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your
policies. Note that your organisation or NGI may have a specific policy and
may have added or removed CAs compared to the EGI core policy.
Sites that need compliance with the WLCG policy should install BOTH packages,
or you will miss out the CERN WLCG IOTA CA specific exception see
https://documents.egi.eu/document/2745 for details and the WLCG statement
http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf
In the first quarter of 2017, full support for differentiated assurance
profiles will be introduced in the EGI trust fabric infrastructure. This
will take the form of an additional trust anchor meta-package, and replaces
the specific policy mechanism described above. Such full support also
required new software and configuration at each resource centre.
We ask for your support in implementing the requisite changes, and deploy
new trust anchor meta-packages and the new local policies only in unison.
The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/
Changes from 1.81 to 1.82
-------------------------
(27 March 2017)
* Added new G2 UGrid trust anchor (UA)
* Extended validity for AEGIS CA (RS)
* Withdrawn discontinued FNAL KCA (US)
* Extended valitity for REUNA CA (CL)
The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian) have been incorporated in the above-
mentioned meta-packages. This release is best enjoyed with fetch-crl v3 or
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl
Version information: ca-policy-egi-core = 1.82-1