Dear Relying Parties, Authorities, Users, and all others interested,
In this announcement of the IGTF:
1. Updated IGTF distribution version 1.117 available
2. WoTBAn&Az 2022 Workshop on Token-Based Authentication and Authorization
============================================================================
1. Updated IGTF distribution version 1.117 available
============================================================================
A new distribution of Accredited Authorities by the Interoperable Global
Trust Federation, based on the IGTF Common Source, is now available. It
includes newly accredited Authorities and retires obsolete trustanchors.
This is version 1.117 (release 1), and it is now available for download
from the Repository (and mirrors) at
https://dist.igtf.net/distribution/igtf/current/
Changes from 1.116 to 1.117
---------------------------
(29 August 2022)
* Add new intermediate ICA DigiCert Grid-TLS (US)
* Add new intermediate ICA DigiCert Grid-Client-RSA2048-SHA256-2022-CA1 (US)
* Removed discontinued NCSA-slcs-2013 following end of XSEDE (US)
* Removed discontinued PSC-Myproxy-CA following end of XSEDE (US)
* RPM packaging: rpm packages are now signed using a SHA-256 digest, file
digests using algo 8 (SHA-256), and the yum/dnf listings are signed with
SHA-256 as well. This removes support for yum-based distributions <=EL5
(for which ELS ended in November 2020), but allows installation of
packages on EL9 (Rocky9, AlmaLinux9, &c) that require SHA-256.
Next Release
------------
Releases are usually done on the last Monday of the month, only when the
trust anchor distribution has materially been updated. The currently-
estimated next release of the distribution will be in October 2022.
============================================================================
2. WoTBAn&Az 2022 Workshop on Token-Based Authentication and Authorization
============================================================================
TAGPMA and the SciAuth project are pleased to invite presentations to be
made at the 2022 Workshop on Token-Based Authentication and Authorization
(WoTBAn&Az 2022), scheduled to take place from 9:00am-1:00pm (UTC -4:00)
Tuesday, October 18, 2022, at the 2022 NSF Cybersecurity Summit
in Bloomington, Indiana, USA.
WoTBAn&Az 2022 details are available at https://sciauth.org/workshop/2022/
Call for Presentations:
To present at WoTBAn&Az 2022, please send the names, affiliations, and
emails for the presenters along with the title and a short description
of the topic to be presented to workshop(a)sciauth.org by September 6, 2022.
We hope that presenters will be able to join us in person at the workshop
in Bloomington. For presenters unable to travel, we will accommodate
remote delivery of accepted presentations via Zoom.
Registration to the 2022 NSF Cybersecurity Summit is free (and required
to present) at: <https://www.trustedci.org/2022-cybersecurity-summit>
We look forward to your submissions. Questions regarding presentation
submissions may also be sent to workshop(a)sciauth.org.
-- Derek Simmel
=========================================================================
REPEATED NOTICES
=========================================================================
Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (e.g. a national
or regional e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI or others) you may
want to await their announcement before installing the release. They could
include localised adaptations. For reference we include the links below:
PRACE-RI https://winnetou.surfsara.nl/prace/certs/
EGI https://edu.nl/envyq (i.e. EGI provider docs HOWTO01)
wLCG https://lcg-ca.web.cern.ch
Open Science Grid https://repo.opensciencegrid.org/cadist/
Not all IGTF releases are necessarily accompanied by infrastructure-specific
releases. If changes in the IGTF distribution do not materially impact the
distribution of the relying party, no associated release may be done, nor is
there a reason to update such a distribution.
Supplementary download locations
--------------------------------
The download repository is also mirrored by the EUGridPMA at
https://dist.eugridpma.info/distribution/igtf/
and is also available from the Debian distribution for its supported
version, e.g. https://packages.debian.org/sid/igtf-policy-classic
About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties.
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/
+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is |
| contains, please read the information at |
| https://dl.igtf.net/distribution/igtf/README.txt |
| |
| This file contains important information for new users and should be |
| read before installing this Distribution. |
+-----------------------------------------------------------------------+
If you have suggestions or improvements for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at
<info(a)eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.
--
David Groep
** Nikhef, Dutch National Institute for Subatomic Physics, PDP programme **
** Maastricht University Faculty of Science & Engineering, Department DKE **
** Visiting address: Science Park 110 room D1.09, NL 1098 XG Amsterdam NL **
** PHS1 Room C4.032, Paul-Henri Spaaklaan 1, Maastricht **
** Phone: +31 20 5922179, keybase.io: dlg, Signal: +31646812179 **
** PGP: 0xD80134C2 308E076A FP: 2facebea12803ba145685a21d80134c2308e076a **
