Dear Relying Parties, Authorities, Users, and all others interested,
In this announcement of the IGTF:
1. Updated IGTF distribution version 1.140 available
============================================================================
1. Updated IGTF distribution version 1.140 available
============================================================================
A new distribution of Accredited Authorities by the Interoperable Global
Trust Federation, based on the IGTF Common Source, is now available. It
includes newly accredited Authorities and retires obsolete trustanchors.
This is version 1.140 (release 1), and it is now available for download
from the Repository (and mirrors) at
https://dist.igtf.net/distribution/igtf/current/
Changes from 1.139 to 1.140
---------------------------
(30 March 2026)
* Added server TLS specific trust hierarchy for eMudhra joint trust (IN)
NOTE: this will be the last release to include also a build with Gen3
(1024 RSA) GPG package signatures. Update local validation configuration
to use Gen4 signatures only.
This release also deprecates SSLeay and OpenSSL 0.x series subject name
hashes in the trust anchor directory (i.e. based on the MD5 encoding of the
binary encoding of the subject distinguised name). These will be removed
after August 2026. For reference, systems distributions dependent hereon
reached end of support in 2020 (RHEL5 ELS) or 2016 (for Debian 6 "Squeeze").
Next Release
------------
Releases are usually done on the last Monday of the month, only when the
trust anchor distribution has materially been updated. The currently-
estimated next release of the distribution will be in end of April 2026
=========================================================================
REPEATED NOTICES
=========================================================================
Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (e.g. a national
or regional e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI or others) you may
want to await their announcement before installing the release. They could
include localised adaptations. For reference we include the links below:
EGI https://edu.nl/envyq (i.e. EGI provider docs HOWTO01)
wLCG https://lcg-ca.web.cern.ch
Open Science Grid https://repo.opensciencegrid.org/cadist/
Not all IGTF releases are necessarily accompanied by infrastructure-specific
releases. If changes in the IGTF distribution do not materially impact the
distribution of the relying party, no associated release may be done, nor is
there a reason to update such a distribution.
Supplementary download locations
--------------------------------
The download repository is also mirrored by the EUGridPMA at
https://dist.eugridpma.info/distribution/igtf/
and is also available from the Debian distribution for its supported version,
e.g. https://packages.debian.org/stable-backports/igtf-policy-classic &c
About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties.
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/
+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is |
| contains, please read the information at |
| https://dl.igtf.net/distribution/igtf/README.txt |
| |
| This file contains important information for new users and should be |
| read before installing this Distribution. |
+-----------------------------------------------------------------------+
If you have suggestions or improvements for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at
<info(a)eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.
--
David Groep
** Nikhef, Dutch National Institute for Subatomic Physics, PDP programme **
** Maastricht University, FSE - Department of Advanced Computing Sciences **
** Visiting address: Science Park 105 room H229b, NL 1098 XG Amsterdam NL **
** PHS1 Room C4.032, Paul-Henri Spaaklaan 1, 6229 EN, Maastricht **
** Phone: +31 20 5922179, keybase.io: dlg, Signal username: davidg.01 **
** PGP: 0xD80134C2 308E076A FP: 2facebea12803ba145685a21d80134c2308e076a **
Dear Relying Parties, Authorities, Users, and all others interested,
In this announcement of the IGTF:
1. Updated IGTF distribution version 1.139 available
============================================================================
1. Updated IGTF distribution version 1.139 available
============================================================================
A new distribution of Accredited Authorities by the Interoperable Global
Trust Federation, based on the IGTF Common Source, is now available. It
includes newly accredited Authorities and retires obsolete trustanchors.
This is version 1.139 (release 1), and it is now available for download
from the Repository (and mirrors) at
https://dist.igtf.net/distribution/igtf/current/
Changes from 1.138 to 1.139
---------------------------
(16 March 2026)
* Update ArmeSFo CA re-issued based on SHA-2 family digest (AM)
* The IGTF DCVOTA assurance profile has been added. For details, please refer
to https://www.igtf.net/ap/dcvota/
Next Release
------------
Releases are usually done on the last Monday of the month, only when the
trust anchor distribution has materially been updated. The currently-
estimated next release of the distribution will be in end of April 2026
=========================================================================
REPEATED NOTICES
=========================================================================
Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (e.g. a national
or regional e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI or others) you may
want to await their announcement before installing the release. They could
include localised adaptations. For reference we include the links below:
EGI https://edu.nl/envyq (i.e. EGI provider docs HOWTO01)
wLCG https://lcg-ca.web.cern.ch
Open Science Grid https://repo.opensciencegrid.org/cadist/
Not all IGTF releases are necessarily accompanied by infrastructure-specific
releases. If changes in the IGTF distribution do not materially impact the
distribution of the relying party, no associated release may be done, nor is
there a reason to update such a distribution.
Supplementary download locations
--------------------------------
The download repository is also mirrored by the EUGridPMA at
https://dist.eugridpma.info/distribution/igtf/
and is also available from the Debian distribution for its supported version,
e.g. https://packages.debian.org/stable-backports/igtf-policy-classic &c
About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties.
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/
+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is |
| contains, please read the information at |
| https://dl.igtf.net/distribution/igtf/README.txt |
| |
| This file contains important information for new users and should be |
| read before installing this Distribution. |
+-----------------------------------------------------------------------+
If you have suggestions or improvements for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at
<info(a)eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.
--
David Groep
** Nikhef, Dutch National Institute for Subatomic Physics, PDP programme **
** Maastricht University, FSE - Department of Advanced Computing Sciences **
** Visiting address: Science Park 105 room H229b, NL 1098 XG Amsterdam NL **
** PHS1 Room C4.032, Paul-Henri Spaaklaan 1, 6229 EN, Maastricht **
** Phone: +31 20 5922179, keybase.io: dlg, Signal username: davidg.01 **
** PGP: 0xD80134C2 308E076A FP: 2facebea12803ba145685a21d80134c2308e076a **
