--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.in2p3.fr/broadcast

--------------------------------------------------------------------------------------------------------------- Publication from : Joao Antonio Tomasio Pina jpina@lip.pt Targets : VO managers/vlemed vlemed-vo-managers@biggrid.nl ----------------------------------------------------------------------------------------------------------------

Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI.

Please upgrade within the next six days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI TSA1.3 Team

Release notes: European Grid Infrastructure EGI Trust Anchor release 1.58 2014.06.30

------------------------------------------------------------------------------ For release DOCUMENTATION available on this EGI Trust Anchor release see https://wiki.egi.eu/wiki/EGI_IGTF_Release ------------------------------------------------------------------------------

Modifications compared to the previous release: * updated to IGTF Accredited CA distribution version 1.58-1 Classic, SLCS and MICS profiles, encoded in meta-package "ca-policy-egi-core-1.58-1" (for new installs) and "lcg-CA-1.58-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu. See documentation for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages, according to your policies. Note that your organisation or NGI may have a specific policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar as pertinent to this release. More information can be found in the EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.57 to 1.58 ------------------------- (30 June 2014)

* Added accredited classic InCommon Server IGTF SSL CA and intermediate Comodo RSA CA (SHA-2) (US) * Extended permitted namespaces for AddTrust-External-CA-Root (EU, US) * Updated certificate URL for IHEP-CA-2013 39d30eba (CN) * Discontinued expiring SEE-GRID '2004' CA - since replaced by new SEEGRID-CA-2013 (GR) * Discontinued retired PRAGMA-UCSD CA (US)

The CA modifications, encoded in both "requires" and "obsoletes" clauses, have been incorporated in the above-mentioned meta-package RPMs. This trust anchor release is best enjoyed with fetch-crl v3 or better, available from popular GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.58-1

---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.in2p3.fr/broadcast/archive/id/1169 ----------------------------------------------------------------------------------------------------------------