Dear CAs, Relying Parties, Users, and all others interested,
In this announcement of the EUGridPMA:
1. New distribution (0.31) with repairs and clarifications
We hope that you find this update useful and welcome any comments you may have. Also, feel free to redistribute this information widely as you see appropriate.
Regards, David Groep
For more information about this newsletter and the mailing list, please refer to the EUGridPMA web site at https://www.eugridpma.org/
========================================================================= 1. New distribution version 0.31 =========================================================================
A new distribution of Accredited Authorities by the EUGridPMA, release version 0.31, is now available for download from the EUGridPMA Repository
https://www.eugridpma.org/distribution/current/
Note that this updates the previous release that was issued three days ago. There are two reasons for this update:
* The Russian Data Intensive Grid (RDIG) CA was accidentally left out of the accredited list. Thus, if you install the old release, you will not get the RDIG CA, contrary to the release notes.
* There was confusion about which CAs were actually accredited, and are thus "safe" to install in a production system
*ONLY* CAs IN THE "accredited/" DIRECTORY and THE CAs INSTALLED USING THE ca_policy_eugridpma-0.31-1.noarch.rpm ARE ACCREDITED
Do *not* install certificates from the "worthless/", "other/", or "discontinued/" directories, except if you your self review and accept their policy and practice statement. The EUGridPMA provides these certificates in this format for your convenience only, and to allow graceful changeover for legacy installations.
You can download the new packages and install them at your convenience.
Changes from 0.30 to 0.31 ------------------------- (15 July 2005)
* Corrected packaging problem which left RDIG out of accredited CA group * renamed the "unknown/" directory to "discontinued/" * Added explanatory text to the distribution regarding the "other/", "worthless/" and "discontinued/" directories
For those using RPM based linux distribution, a "meta-RPM" is available from the repository, ca_policy_eugridpma-0.31-1.noarch.rpm, that contains dependencies on the RPMs of all accredited CAs. The repository is suitable for "yum" based automatic updates.
This is the first RPM distribution that will (on an experimental basis) used GPG-signed RPMs. The key (ID 3CDBBC71) has been uploaded to the public key servers, along with my signature as the EUGridPMA Chair (keyID 6F298418). The key is also contained in the repository.
The next release of the CA RPMs is to be expected around August 2005, (of course barring special circumstances). The format of those new releases is currently under considation. If you want to contribute to the discussion or to suggest improvements to have it better suit your needs, please contact the PMA at info@eugridpma.org. There will be a common distribution format across the entire IGTF (i.e. all three PMAs).