Dear CAs, Relying Parties, Users, and all others interested,
In this announcement of the IGTF:
1. Updated IGTF distribution version 1.53 available
2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality
=========================================================================
1. Updated IGTF distribution version 1.53 available
=========================================================================
A new distribution of Accredited Authorities by the EUGridPMA, based
on the IGTF Common Source, is now available. It includes the newly
accredited Authorities by all IGTF Members and retires expiring CA
certificates. This is version 1.53 release 1, and it is now available
for download from the Repository (and mirrors) at
https://dist.eugridpma.info/distribution/igtf/current/
Changes from 1.52 to 1.53
-------------------------
(27 May 2013)
* Added new root cert for IHEP CA (2013) (CN)
* Removed retired NCSA GridShib CA (e8ac4b61) (US)
* Removed backup crl_url locations for CILogon CAs
due to future crl.doegrids.org shutdown. (US)
* Removed retired TACC CAs (2ac09305, 684261aa, e5cc84c2) (US)
* Updated NERSC CA (b93d6240) to extend validity and change to
self-signed rather than subordinate to ESnet (US)
Next Release
------------
Releases are usually done on the last Monday of the month, only when
the trust anchor distribution has been updated substantially. The
currently-estimated next release date of the distribution is at the
end of June 2013.
=========================================================================
2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality
=========================================================================
The fetch-crl utility will retrieve certificate revocation lists (CRLs) for
a set of installed trust anchors, based on crl_url files or IGTF-style info
files. It will install these for use with OpenSSL, NSS or third-party tools.
Changes in 3.0.10-1
----------------------
* Added a "noquiet" option in the configuration file that will override
the default single "-q" option in the cro-job that is shipped with
the fetch-crl3 init scripts (feature request by Ryan Taylor)
* Added option "--inet6glue" and "inet6glue" config setting to load
the Net::INET6Glue perl module (if it is available) to use IPv6
connections in LWP to download CRLs
Download fetch-crl from
https://dist.eugridpma.info/distribution/util/fetch-crl3/
and read about it at
http://www.nikhef.nl/grid/fetchcrl3
=========================================================================
REPEATED NOTICES
=========================================================================
Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (such as a
national e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI and others) you
may want to await your project announcement before installing this
release.
The download repository is also mirrored by the APGridPMA at
https://www.apgridpma.org/distribution/igtf/
About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties.
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/
+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is |
| contains, please read the information at |
| https://dist.eugridpma.info/distribution/igtf/README.txt |
| |
| This file contains important information for new users and should be |
| read before installing this Distribution. |
+-----------------------------------------------------------------------+
If you have suggestions or improvements for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at
<info(a)eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.
--
David Groep
** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group **
** Room: H1.50 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **
Dear CAs, Relying Parties, Users, and all others interested,
In this announcement of the IGTF:
1. Updated IGTF distribution version 1.53 available
2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality
=========================================================================
1. Updated IGTF distribution version 1.53 available
=========================================================================
A new distribution of Accredited Authorities by the EUGridPMA, based
on the IGTF Common Source, is now available. It includes the newly
accredited Authorities by all IGTF Members and retires expiring CA
certificates. This is version 1.53 release 1, and it is now available
for download from the Repository (and mirrors) at
https://dist.eugridpma.info/distribution/igtf/current/
Changes from 1.52 to 1.53
-------------------------
(27 May 2013)
* Added new root cert for IHEP CA (2013) (CN)
* Removed retired NCSA GridShib CA (e8ac4b61) (US)
* Removed backup crl_url locations for CILogon CAs
due to future crl.doegrids.org shutdown. (US)
* Removed retired TACC CAs (2ac09305, 684261aa, e5cc84c2) (US)
* Updated NERSC CA (b93d6240) to extend validity and change to
self-signed rather than subordinate to ESnet (US)
Next Release
------------
Releases are usually done on the last Monday of the month, only when
the trust anchor distribution has been updated substantially. The
currently-estimated next release date of the distribution is at the
end of June 2013.
=========================================================================
2. fetch-crl v3.0.10 introduces IPv6 perl glue functionality
=========================================================================
The fetch-crl utility will retrieve certificate revocation lists (CRLs) for
a set of installed trust anchors, based on crl_url files or IGTF-style info
files. It will install these for use with OpenSSL, NSS or third-party tools.
Changes in 3.0.10-1
----------------------
* Added a "noquiet" option in the configuration file that will override
the default single "-q" option in the cro-job that is shipped with
the fetch-crl3 init scripts (feature request by Ryan Taylor)
* Added option "--inet6glue" and "inet6glue" config setting to load
the Net::INET6Glue perl module (if it is available) to use IPv6
connections in LWP to download CRLs
Download fetch-crl from
https://dist.eugridpma.info/distribution/util/fetch-crl3/
and read about it at
http://www.nikhef.nl/grid/fetchcrl3
=========================================================================
REPEATED NOTICES
=========================================================================
Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (such as a
national e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI and others) you
may want to await your project announcement before installing this
release.
The download repository is also mirrored by the APGridPMA at
https://www.apgridpma.org/distribution/igtf/
About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties.
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/
+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is |
| contains, please read the information at |
| https://dist.eugridpma.info/distribution/igtf/README.txt |
| |
| This file contains important information for new users and should be |
| read before installing this Distribution. |
+-----------------------------------------------------------------------+
If you have suggestions or improvements for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at
<info(a)eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.
--
David Groep
** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group **
** Room: H1.50 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **