---------------------------------------------------------------------------------------------------------------
EGI BROADCAST TOOL : https://operations-portal.egi.eu/broadcast
---------------------------------------------------------------------------------------------------------------
Publication from : Mario David <[log in to unmask]>
Targets : Generic mailing-list/LCG Rollout Mailing List
<[log in to unmask]>
----------------------------------------------------------------------------------------------------------------
Dear all
Two issues have been found early today with the CA release 1.41, triggering
an urgent new release of the CA trustanchors.
The first issue:
- Corrected signing_policy file for UKeScience CA 2B (UK), is solved in the
current 1.42 release
The second issue only affects dCache sites and does not depend on the CA
Trust Anchor release:
- Users of the dCache storage software may encounter issues with the larger
number of CAs included in this release. An update from dCache.org is
forthcoming to address this issue. Meanwhile, removing up to 4 CAs that are
not used at your site *and* by your users may suppress the symptoms.
We apologize for the short notice, but please follow the usual deployment of
the new release
A detailed announcement from IGTF is given below
EGI TSA1.3 Team
European Grid Infrastructure EGI Trust Anchor release 1.42 2011.09.30
------------------------------------------------------------------------------
For release DOCUMENTATION available on this EGI Trust Anchor release see
https://wiki.egi.eu/wiki/EGI_IGTF_Release
------------------------------------------------------------------------------
Modifications compared to the previous release:
* updated to IGTF Accredited CA distribution version 1.42-1 Classic, SLCS and
MICS profiles, encoded in meta-package "ca-policy-egi-core-1.42-1" (for new
installs) and "lcg-CA-1.42-1" (for sites upgrading from EGEE/LCG releases).
* users of the dCache storage software may encounter issues with the
larger number of CAs included in this release. An update from dCache.org
is forthcoming to address this issue. Meanwhile, removing up to 4 CAs that
are not used at your site *and* by your users may suppress the symptoms.
* Location of the repository changed to repository.egi.eu. See documentation
for details and the updated repo files.
* Your may install BOTH the "egi-core" AND "lcg" meta-packages, according to
your policies. Note that your organisation or NGI may have a specific
policy and may have added or removed CAs compared to the EGI core policy.
* This release adds experimental Debian/APT support. See
http://repository.egi.eu/sw/production/cas/1/current/dists/
for how to configure your APT/deb based system to use the EGI Trust Anchors
and run 'apt-get update' and 'apt-get install ca-policy-egi-core'
The following notices are republished from the IGTF and EUGridPMA, inasfar
as pertinent to this release. More information can be found in the
EUGridPMA newsletter (see https://www.eugridpma.org/):
Changes from 1.41 to 1.42
-------------------------
(30 September 2011)
* Corrected signing_policy file for UKeScience CA 2B (UK)
The CA modifications, encoded in both "requires" and "obsoletes" clauses, have
been incorporated in the above-mentioned meta-package RPMs. This trust anchor
release is best enjoyed with fetch-crl v3 or better, available from popular
GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
link to this broadcast :
https://operations-portal.egi.eu/broadcast/archive/id/485
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
|
