Dear CAs, Relying Parties, Users, and all others interested,

In this announcement of the IGTF:

1. Updated IGTF distribution version 1.53 available 2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality

========================================================================= 1. Updated IGTF distribution version 1.53 available =========================================================================

A new distribution of Accredited Authorities by the EUGridPMA, based on the IGTF Common Source, is now available. It includes the newly accredited Authorities by all IGTF Members and retires expiring CA certificates. This is version 1.53 release 1, and it is now available for download from the Repository (and mirrors) at

https://dist.eugridpma.info/distribution/igtf/current/

Changes from 1.52 to 1.53 ------------------------- (27 May 2013)

* Added new root cert for IHEP CA (2013) (CN) * Removed retired NCSA GridShib CA (e8ac4b61) (US) * Removed backup crl_url locations for CILogon CAs due to future crl.doegrids.org shutdown. (US) * Removed retired TACC CAs (2ac09305, 684261aa, e5cc84c2) (US) * Updated NERSC CA (b93d6240) to extend validity and change to self-signed rather than subordinate to ESnet (US)

Next Release ------------ Releases are usually done on the last Monday of the month, only when the trust anchor distribution has been updated substantially. The currently-estimated next release date of the distribution is at the end of June 2013.

========================================================================= 2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality =========================================================================

The fetch-crl utility will retrieve certificate revocation lists (CRLs) for a set of installed trust anchors, based on crl_url files or IGTF-style info files. It will install these for use with OpenSSL, NSS or third-party tools.

Changes in 3.0.10-1 ---------------------- * Added a "noquiet" option in the configuration file that will override the default single "-q" option in the cro-job that is shipped with the fetch-crl3 init scripts (feature request by Ryan Taylor) * Added option "--inet6glue" and "inet6glue" config setting to load the Net::INET6Glue perl module (if it is available) to use IPv6 connections in LWP to download CRLs

Download fetch-crl from https://dist.eugridpma.info/distribution/util/fetch-crl3/ and read about it at http://www.nikhef.nl/grid/fetchcrl3

========================================================================= REPEATED NOTICES =========================================================================

Use in coordinated-deployment infrastructures --------------------------------------------- If you are part of a coordinated-deployment infrastructure (such as a national e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI and others) you may want to await your project announcement before installing this release.

The download repository is also mirrored by the APGridPMA at https://www.apgridpma.org/distribution/igtf/

About this news letter ---------------------- This newsletter carries IGTF information intended for relying parties. For more information about this newsletter and how to subscribe, refer to the EUGridPMA web site at https://www.eugridpma.org/

+-----------------------------------------------------------------------+ | For information on the IGTF Distribution, how to use it and what is | | contains, please read the information at | | https://dist.eugridpma.info/distribution/igtf/README.txt | | | | This file contains important information for new users and should be | | read before installing this Distribution. | +-----------------------------------------------------------------------+

If you have suggestions or improvements for the distribution format, to have it better suit your needs, please contact the EUGridPMA PMA at info@eugridpma.org or your Regional Policy Management Authority. See the IGTF web site (www.igtf.net) for further information.