--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.in2p3.fr/broadcast

--------------------------------------------------------------------------------------------------------------- Publication from : Joao Antonio Tomasio Pina jpina@lip.pt Targets : VO managers/vlemed vlemed-vo-managers@biggrid.nl ----------------------------------------------------------------------------------------------------------------

Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. Please upgrade within the next sixt days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI TSA1.3 Team

ReleaseNotes for 1.55-1:

European Grid Infrastructure EGI Trust Anchor release 1.55 2013.11.25

------------------------------------------------------------------------------ For release DOCUMENTATION available on this EGI Trust Anchor release see https://wiki.egi.eu/wiki/EGI_IGTF_Release ------------------------------------------------------------------------------

Modifications compared to the previous release: * updated to IGTF Accredited CA distribution version 1.55-1 Classic, SLCS and MICS profiles, encoded in meta-package "ca-policy-egi-core-1.55-1" (for new installs) and "lcg-CA-1.55-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu. See documentation for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages, according to your policies. Note that your organisation or NGI may have a specific policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar as pertinent to this release. More information can be found in the EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.54 to 1.55 ------------------------- (25 November 2013) THIS RELEASE IS THE LAST ONE ALSO TO BE DISTRIBUTED IN SINGLE HASH FORMAT

* New root certificate with extended life time for NorduGrid CA 1f0e8352 (DK) * Updated contact metadata for all RENATER Grid-FR related CAs (FR) * Updated CRL URL and metadata for IHEP 2013 CA 39d30eba (CN) * New root certificates for NCSA CA re-key: MyProxy CA 2013 c36f6349/7aa2b7bd and Two Factor CA 2013 ca157cee/48c8f10a (US) * New root certificate for EGI catch-all CA "SEEGRID-CA-2013" 772dbd1c (GR) * Removed AIST Grid CA (JP) * Discontinued IUCC CA (6fee79b0) following migration to TCS (IL) * Suspended JUnet-CA (b3222f9e) (JO)

The CA modifications, encoded in both "requires" and "obsoletes" clauses, have been incorporated in the above-mentioned meta-package RPMs. This trust anchor release is best enjoyed with fetch-crl v3 or better, available from popular GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.55-1

ChangeLog: Update of the EGI Trust Anchors to IGTF release 1.55-1

---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.in2p3.fr/broadcast/archive/id/1049 ----------------------------------------------------------------------------------------------------------------