==============================================================================
LHC Computing Grid Trust Anchor release 1.86-1                      2017.10.09
==============================================================================

This is the wLCG Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.86-1 with Classic, SLCS and MICS profiles,
encoded in
meta-package "ca-policy-egi-core-1.86-1" (new installs) and "lcg-CA-1.86-1"
(for sites also part of wLCG and/or upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages
  or you will miss out the CERN WLCG IOTA CA specific exception. See also
    http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

Unless notified otherwise all packages are available in both the EGI and the
wLCG repository at https://cern.ch/lcg-ca/
Install both  lcg and egi-core packages for a complete set of trust anchors.
At sites using the JSPG policy package  "lcg-CA" both are active by default.

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.85 to 1.86
-------------------------
(9 October Septembet 2017)

* updated MaGrid CA with extended validity period (MA)
* removed discontinued pkIRISGrid CA (ES)
* discontinued depricated yum v2 and rpm-apt package management support
  (only affects yum installs on RHEL/CentOS 2&3, Fedora Core 1-3, and bespoke
  support for installing RPM packages using APT for pre-2006 RedHat systems)


The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-lcg = 1.86-1