| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: idm-pki-kra | Distribution: CentOS |
| Version: 11.3.0 | Vendor: CentOS |
| Release: 1.el9 | Build date: Mon Jan 30 10:45:43 2023 |
| Group: Unspecified | Build host: aarch64-03.stream.rdu2.redhat.com |
| Size: 631615 | Source RPM: pki-core-11.3.0-1.el9.src.rpm |
| Packager: builder@centos.org | |
| Url: https://www.dogtagpki.org | |
| Summary: IDM PKI KRA Package | |
IDM PKI Key Recovery Authority (KRA) is an optional subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user's private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys.
GPLv2 and LGPLv2
* Mon Jan 30 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
- Rebase to PKI 11.3.0
- Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
- Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled
* Wed Nov 30 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
- Rebase to PKI 11.3.0-beta1
- Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
- Bug #1883477 - [RFE] Automatic expired certificate purging
- Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
- Bug #2106452 - softhsm2: Unable to create cert: Private key not found
- Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile
* Thu Aug 04 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
- Rebase to PKI 11.2.1
- Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]
* Fri Jul 01 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
- Rebase to PKI 11.2.0
- Bug #2084639 ipa cert-request ssl error
- Bug #2099312 SKI field is not reflected back in generated CSR
- Bug #2095197 PKI cert-fix operation failing
* Fri May 06 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
- Rebase to PKI 11.2.0-beta3
- Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]
* Mon May 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.3.beta2
- Rebase to PKI 11.2.0-beta2
- Rename packages to idm-pki
* Mon Apr 18 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.2.beta1
- Rebase to PKI 11.2.0-beta1
* Wed Jan 19 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
- Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
- Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
- Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser
* Thu Dec 02 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.1-3
- Change gcc compiler flags to fix annobin gating failures
* Tue Nov 23 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.1-2
- Rebase to PKI 11.0.1
* Tue Oct 05 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-1
- Rebase to PKI 11.0.0
* Thu Sep 30 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.6.beta1
- Rebase to PKI 11.0.0-beta1
- Bug #1999052 - pki instance creation fails for IPA server
* Thu Sep 09 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.5.alpha1
- Drop BuildRequires and Requires on glassfish-jaxb-api and jaxb-impl
Resolves #2002594
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 11.0.0-0.4.alpha1
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
* Thu Jul 01 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.3
- Drop sudo dependency
* Tue Jun 29 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.2
- Resolves: rhbz#1975406 - IPA installation fails during pki-tomcatd setup.
* Fri Jun 25 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.1
- Rebase to PKI 11.0.0-alpha1
* Tue May 18 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-0.1
- Rebase to PKI 10.11.0-alpha1
/usr/share/java/pki/pki-kra.jar /usr/share/licenses/idm-pki-kra /usr/share/licenses/idm-pki-kra/LICENSE /usr/share/pki/kra /usr/share/pki/kra/conf /usr/share/pki/kra/conf/CS.cfg /usr/share/pki/kra/conf/Catalina /usr/share/pki/kra/conf/Catalina/localhost /usr/share/pki/kra/conf/Catalina/localhost/kra.xml /usr/share/pki/kra/conf/acl.properties /usr/share/pki/kra/conf/auth-method.properties /usr/share/pki/kra/conf/uriworkermap.properties /usr/share/pki/kra/database /usr/share/pki/kra/database/ds /usr/share/pki/kra/database/ds/acl.ldif /usr/share/pki/kra/database/ds/create.ldif /usr/share/pki/kra/database/ds/index.ldif /usr/share/pki/kra/database/ds/indextasks.ldif /usr/share/pki/kra/database/ds/vlv.ldif /usr/share/pki/kra/database/ds/vlvtasks.ldif /usr/share/pki/kra/webapps /usr/share/pki/kra/webapps/kra /usr/share/pki/kra/webapps/kra/404.html /usr/share/pki/kra/webapps/kra/500.html /usr/share/pki/kra/webapps/kra/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/WEB-INF /usr/share/pki/kra/webapps/kra/WEB-INF/classes /usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties /usr/share/pki/kra/webapps/kra/WEB-INF/lib /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cms.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar /usr/share/pki/kra/webapps/kra/WEB-INF/web.xml /usr/share/pki/kra/webapps/kra/admin /usr/share/pki/kra/webapps/kra/admin/console /usr/share/pki/kra/webapps/kra/agent /usr/share/pki/kra/webapps/kra/agent/GenError.template /usr/share/pki/kra/webapps/kra/agent/GenPending.template /usr/share/pki/kra/webapps/kra/agent/GenRejected.template /usr/share/pki/kra/webapps/kra/agent/GenSuccess.template /usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template /usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template /usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/agent/cms-funcs.js /usr/share/pki/kra/webapps/kra/agent/funcs.js /usr/share/pki/kra/webapps/kra/agent/header.template /usr/share/pki/kra/webapps/kra/agent/helpfun.js /usr/share/pki/kra/webapps/kra/agent/index.jsp /usr/share/pki/kra/webapps/kra/agent/index.template /usr/share/pki/kra/webapps/kra/agent/kra /usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html /usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html /usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template /usr/share/pki/kra/webapps/kra/agent/kra/getStats.template /usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/index.jsp /usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html /usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html /usr/share/pki/kra/webapps/kra/agent/kra/monitor.template /usr/share/pki/kra/webapps/kra/agent/kra/processReq.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template /usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/top.html /usr/share/pki/kra/webapps/kra/index.jsp /usr/share/pki/kra/webapps/kra/js /usr/share/pki/kra/webapps/kra/js/key.js /usr/share/pki/kra/webapps/kra/js/keyrequest.js /usr/share/pki/kra/webapps/kra/services.template /usr/share/pki/kra/webapps/kra/ui /usr/share/pki/kra/webapps/kra/ui/home.html /usr/share/pki/kra/webapps/kra/ui/index.jsp /usr/share/pki/kra/webapps/kra/ui/key.html /usr/share/pki/kra/webapps/kra/ui/keyrequest.html /usr/share/pki/kra/webapps/kra/ui/keyrequests.html /usr/share/pki/kra/webapps/kra/ui/keys.html
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Apr 24 05:27:45 2024