==============================================================================
LHC Computing Grid Trust Anchor release 1.140-1                     2026.03.30
==============================================================================

This is the wLCG Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.140-1 with Classic, SLCS and MICS profiles,
encoded in meta-package "ca-policy-egi-core-1.140-1" (new installs) and "lcg-CA-1.140-1"
(for sites also part of wLCG and/or upgrading from EGEE/JSPG releases).

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.139 to 1.140
---------------------------
(30 March 2026)

* Added server TLS specific trust hierarchy for eMudhra joint trust (IN)

NOTE: this will be the last release to include a build with Gen3 GPG 
  package signatures.
  This release also deprecates SSLeay and OpenSSL 0.x series subject name 
  hashes in the trust anchor directory (i.e. based on the MD5 encoding of the
  binary encoding of the subject distinguised name). These will be removed 
  after August 2026. For reference, systems distributions dependent hereon 
  reached end of support in 2020 (RHEL5 ELS) or 2016 (for Debian 6 "Squeeze").

Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your
policies. Note that your organisation or NGI may have a specific policy and
may have added or removed CAs compared to the EGI core policy.

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-lcg = 1.140-1