--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.in2p3.fr/broadcast

--------------------------------------------------------------------------------------------------------------- Publication from : Joao Antonio Tomasio Pina jpina@lip.pt Targets : VO managers/vlemed vlemed-vo-managers@biggrid.nl ----------------------------------------------------------------------------------------------------------------

Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI.

Please upgrade within the next sixt days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI TSA1.3 Team

ReleaseNotes for 1.56-1:

European Grid Infrastructure EGI Trust Anchor release 1.56 2014.03.31

------------------------------------------------------------------------------ For release DOCUMENTATION available on this EGI Trust Anchor release see https://wiki.egi.eu/wiki/EGI_IGTF_Release ------------------------------------------------------------------------------

Modifications compared to the previous release: * updated to IGTF Accredited CA distribution version 1.56-1 Classic, SLCS and MICS profiles, encoded in meta-package "ca-policy-egi-core-1.56-1" (for new installs) and "lcg-CA-1.56-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu. See documentation for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages, according to your policies. Note that your organisation or NGI may have a specific policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar as pertinent to this release. More information can be found in the EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.55 to 1.56 ------------------------- (31 March 2014)

* Removed discontinued SWITCHslcs2011 and associated Root (CH) * Removed discontinued APAC CA (AU) * Removed discontinued DoEGrids CA and ESnet root (US) * Add reference to CA website for AustrianGrid CA (AT) * Add new subordinates for DigiCert: 1cdf1cd9/DigiCertGridCA-1G2-Classic and 5d9ea26d/DigiCertGridTrustCAG2-Classic (US) * Debian packaging dependencies in meta-packages now correctly use all- lower-case package names throughout

The CA modifications, encoded in both "requires" and "obsoletes" clauses, have been incorporated in the above-mentioned meta-package RPMs. This trust anchor release is best enjoyed with fetch-crl v3 or better, available from popular GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.56-1

---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.in2p3.fr/broadcast/archive/id/1113 ----------------------------------------------------------------------------------------------------------------