European Grid Infrastructure EGI Trust Anchor release 1.86          2017.10.09

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.86-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.86-1" (new installs) and "lcg-CA-1.86-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception. Details, see:
    https://documents.egi.eu/document/2745

  The next release 1.86 will add support for differentiated assurance in the
  EGI trust fabric infrastructure in the form of an additional trust anchor
  meta-package, which replaces the specific policy mechanism described above.
  Please review the documentation for the new software that will be needed
  to support differentiated assurance and the Collaborative Assurance Model.
  We ask for your support in implementing the requisite changes, and deploy
  new trust anchor meta-packages and the new local policies only in unison.

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.85 to 1.86
-------------------------
(9 October 2017)

* updated MaGrid CA with extended validity period (MA)
* removed discontinued pkIRISGrid CA (ES)
* discontinued depricated yum v2 and rpm-apt package management support
  (only affects yum installs on RHEL/CentOS 2&3, Fedora Core 1-3, and bespoke
  support for installing RPM packages using APT for pre-2006 RedHat systems)


The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.86-1