| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pki-kra | Distribution: CentOS |
| Version: 10.12.0 | Vendor: CentOS |
| Release: 2.module_el8.6.0+1089+63e53b72 | Build date: Fri Feb 11 17:16:12 2022 |
| Group: Unspecified | Build host: aarch64-02.mbox.centos.org |
| Size: 632142 | Source RPM: pki-core-10.12.0-2.module_el8.6.0+1089+63e53b72.src.rpm |
| Packager: CentOS Buildsys <bugs@centos.org> | |
| Url: https://www.dogtagpki.org | |
| Summary: PKI KRA Package | |
The Key Recovery Authority (KRA) is an optional PKI subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user's private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys.
GPLv2 and LGPLv2
* Thu Feb 03 2022 Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-2
- Bug 2027470 - pki-healthcheck ClonesConnectivyAndDataCheck fails
* Tue Nov 09 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-0.1
- Rebase to PKI 10.12.0
- Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
- Bug 1984455 - [RFE] Date Format on the TPS Agent Page
- Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
- Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
- Bug 2006070 - Upgrades incorrectly add secret attribute to connectors
* Thu Aug 12 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-2
- Bug 1992337 - Double issuance of non-CA subsystem certs at installation
* Mon Jul 26 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-1
- Rebase to PKI 10.11.0
* Mon Jun 14 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-0.3
- Rebase to PKI 10.11.0-alpha3
* Thu Jun 03 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-0.2
- Fix JAVA_HOME
* Wed Jun 02 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.11.0-0.1
- Rebase to PKI 10.11.0-alpha2
* Mon Feb 08 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.4-1
- Rebase to PKI 10.10.4
- Bug 1664435 - Error instantiating class for challenge_password with SCEP request
- Bug 1912418 - OCSP and TKS cloning failed due to duplicate replica ID
- Bug 1916686 - Memory leak during ACME performance test
- Bug 1919282 - ACME cert enrollment failed with HTTP 500
* Thu Jan 14 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.3-1
- Rebase to PKI 10.10.3
- Bug 1584550 - CRMFPopClient: unexpected behavior with -y option when values are specified
- Bug 1590942 - CMCResponse treats -d as optional
- Bug 1890639 - Two-step installation with external certificates fails on HSM configured system
- Bug 1912493 - pkispawn reports incorrect FIPS mode
* Tue Dec 08 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.2-1
- Rebase to PKI 10.10.2
- Bug 1392616 - KRA key recovery cli kra-key-retrieve generates an invalid p12 file
- Bug 1897120 - pki-server cert-fix command failing
- Bug 1694664 - ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (503)
* Tue Nov 17 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.1-1
- Rebase to PKI 10.10.1
- Bug 1843416 - kra-audit-mod fail with Invalid event configuration
- Bug 1889691 - ACME failed when run with more than 1 thread/connection
- Bug 1891577 - Sub-ordinate installation is failing with NullPointerException
* Wed Oct 28 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-1
- Rebase to PKI 10.10.0
- Add workaround for missing capture_output in Python 3.6
- Fix JSS initialization in pki-server <subsystem>-user-cert-add
- Fix NPE in UGSubsystem.findUsersByKeyword()
- Bug 1787115 - Need Method to copy SKI from CSR to Certificate signed
- Bug 1875563 - Add KRA Transport and Storage Certificates profiles, audit for IPA
- Bug 1883996 - Inconsistent folders in pki-tools
* Tue Oct 20 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-0.2.beta1
- Rebase to PKI 10.10.0-beta1
- Bug 1868233 - Disabling AIA and cert policy extensions in ACME examples
* Fri Sep 11 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.4-1
- Rebase to PKI 10.9.4
- Bug 1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add
* Thu Sep 03 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.3-1
- Rebase to PKI 10.9.3
- Bug 1869893 - Common certificates are missing in CS.cfg on shared PKI instance
* Tue Aug 18 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.2-2
- Bug 1871064 - Replica install failing during pki-ca component configuration
* Tue Aug 18 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.2-1
- Rebase to PKI 10.9.2
* Wed Aug 12 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.1-2
- Bug 1857933 - CA Installation is failing with ncipher v12.30 HSM
- Bug 1868233 - Disabling AIA and cert policy extensions in ACME examples
* Thu Aug 06 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.1-1
- Rebase to PKI 10.9.1
- Bug 1426572 - Fix Secure connection issue when server is down
* Fri Jul 31 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-1
- Rebase to PKI 10.9.0
* Tue Jul 14 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.7
- Fix pki kra-key-generate failure
- Fix error handling in PKIRealm
* Fri Jul 10 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.6
- Rebase to PKI 10.9.0-b4
* Thu Jun 25 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.4
- Rebase to PKI 10.9.0-b2
* Mon Jun 22 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.3
- Rebase to PKI 10.9.0-b1
* Tue May 26 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.1
- Rebase to PKI 10.9.0-a1
* Tue Mar 03 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.3-1
- Rebase to PKI 10.8.3
- Bug 1809210 - TPS installation failure on HSM machine
- Bug 1807421 - Subordinate CA installation failed
- Bug 1806840 - KRA cloning with HSM failed
* Wed Feb 19 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.2-2
- Bug 1795215 - pkispawn interactive installation failed
* Mon Feb 17 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.2-1
- Rebase to PKI 10.8.2
- Bug 1802006 - KRA installation failed to create ECC admin cert
* Mon Feb 10 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.1-1
- Rebase to PKI 10.8.1
* Fri Feb 07 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-1
- Rebase to PKI 10.8.0
* Thu Jan 16 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.5
- Rebase to PKI 10.8.0-b3
* Fri Dec 13 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.4
- Rebase to PKI 10.8.0-b2
* Wed Dec 11 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.3
- Rebase to PKI 10.8.0-b1
* Fri Nov 22 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.2
- Rebase to PKI 10.8.0-a2
* Thu Oct 31 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.1
- Rebase to PKI 10.8.0-a1
* Wed Aug 14 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.3-1
- Rebase to PKI 10.7.3
- Bug 1698084 - pkidestroy not working as expected
- Bug 1468050 and Bug #1448235 - Support AES for LWCA key replication
* Tue Jul 23 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.2-1
- Rebase to PKI 10.7.2
- Bug 1721340 - TPS installation failure
- Bug 1248216 - Incorrect pkidaemon status
- Bug 1729215 - cert-fix: detect and prevent pkidbuser being used as --agent-uid
- Bug 1698059 - pki-core implements crypto
* Thu Jun 13 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.1-2
- Fix cloning issue
- Fix TPS installation issue
* Wed Jun 12 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.1-1
- Rebase to PKI 10.7.1
* Wed Apr 24 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.0-1
- Rebase to PKI 10.7.0
* Mon Jan 28 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.9-2
- Bug 1652269 - Replace Nuxwdog
* Mon Jan 14 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.9-1
- Rebase to PKI 10.6.9
- Bug 1629048 - X500Name.directoryStringEncodingOrder overridden by CSR encoding
- Bug 1652269 - Replace Nuxwdog
- Bug 1656856 - Need Method to Include SKI in CA Signing Certificate Request
* Thu Nov 29 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.8-1
- Rebase to PKI 10.6.8
- Bug 1602659 - Fix issues found by covscan
- Bug 1566360 - Fix missing serial number from pki-server subsystem-cert-find
* Fri Oct 26 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.7-3
- Bug 1643101 - Fix problems due to token normalization
* Tue Oct 23 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.7-2
- Bug 1623444 - Fix Python KeyClient KeyRequestResponse parsing
* Fri Oct 05 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.7-1
- Rebase to PKI 10.6.7
* Fri Aug 24 2018 Alexander Bokovoy <abokovoy@redhat.com> 10.6.6-3
- Build on s390x
* Wed Aug 22 2018 Alexander Bokovoy <abokovoy@redhat.com> 10.6.6-2
- Use platform-python interpreter
- Bug 1620066 - pkispawn crashes as /usr/bin/python3 does not exist
* Mon Aug 13 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.6-1
- Rebase to PKI 10.6.6
* Wed Aug 08 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.5-1
- Rebase to PKI 10.6.5
* Tue Aug 07 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-4
- Bug 1612063 - Do not override system crypto policy (support TLS 1.3)
* Wed Aug 01 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-3
- Patch PKI to use Jackson 2 and avoid Jackson 1 dependency.
Add direct dependency on slf4j-jdk14.
* Tue Jul 31 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-2
- Update Jackson and RESTEasy dependencies
* Fri Jul 20 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-1
- Rebase to PKI 10.6.4
* Thu Jul 05 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.3-1
- Rebase to PKI 10.6.3
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> 10.6.2-4
- Rebuild for Python 3.7
* Thu Jun 28 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.2-3
- Fix macro expressions
- Bug 1566606 - pki-core: Switch to Python 3
- Bug 1590467 - pki-core: Drop pylint dependency from RHEL 8
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> 10.6.2-2
- Rebuild for Python 3.7
* Fri Jun 15 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.2-1
- Rebase to PKI 10.6.2
* Wed May 30 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-3
- Update JSS dependency
- Update Tomcat dependency
- Fix rpmlint warnings
* Fri May 04 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-2
- Bug 1574711 - pki-tools cannot be installed on current Rawhide
- Fix rpmlint warnings
* Thu May 03 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-1
- Rebase to PKI 10.6.1
- Bug 1559047 - pki-core misses a dependency to pki-symkey
- Bug 1573094 - FreeIPA external CA installation fails
* Wed Apr 11 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-1
- Update project URL and package descriptions
- Clean up spec file
- Rebase to PKI 10.6.0 final
* Thu Mar 29 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-0.3
- Iryna Shcherbina <ishcherb@redhat.com>: Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
- Rebase to PKI 10.6.0 beta2
* Thu Mar 15 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-0.2
- Rebase to PKI 10.6.0 beta
/usr/share/java/pki/pki-kra.jar /usr/share/licenses/pki-kra /usr/share/licenses/pki-kra/LICENSE /usr/share/pki/kra /usr/share/pki/kra/conf /usr/share/pki/kra/conf/CS.cfg /usr/share/pki/kra/conf/Catalina /usr/share/pki/kra/conf/Catalina/localhost /usr/share/pki/kra/conf/Catalina/localhost/kra.xml /usr/share/pki/kra/conf/acl.ldif /usr/share/pki/kra/conf/acl.properties /usr/share/pki/kra/conf/auth-method.properties /usr/share/pki/kra/conf/db.ldif /usr/share/pki/kra/conf/index.ldif /usr/share/pki/kra/conf/indextasks.ldif /usr/share/pki/kra/conf/uriworkermap.properties /usr/share/pki/kra/conf/vlv.ldif /usr/share/pki/kra/conf/vlvtasks.ldif /usr/share/pki/kra/setup /usr/share/pki/kra/setup/registry_instance /usr/share/pki/kra/webapps /usr/share/pki/kra/webapps/ROOT /usr/share/pki/kra/webapps/ROOT/WEB-INF /usr/share/pki/kra/webapps/ROOT/WEB-INF/web.xml /usr/share/pki/kra/webapps/ROOT/index.jsp /usr/share/pki/kra/webapps/kra /usr/share/pki/kra/webapps/kra/404.html /usr/share/pki/kra/webapps/kra/500.html /usr/share/pki/kra/webapps/kra/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/WEB-INF /usr/share/pki/kra/webapps/kra/WEB-INF/classes /usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties /usr/share/pki/kra/webapps/kra/WEB-INF/lib /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cms.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cmsbundle.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar /usr/share/pki/kra/webapps/kra/WEB-INF/web.xml /usr/share/pki/kra/webapps/kra/admin /usr/share/pki/kra/webapps/kra/admin/console /usr/share/pki/kra/webapps/kra/agent /usr/share/pki/kra/webapps/kra/agent/GenError.template /usr/share/pki/kra/webapps/kra/agent/GenPending.template /usr/share/pki/kra/webapps/kra/agent/GenRejected.template /usr/share/pki/kra/webapps/kra/agent/GenSuccess.template /usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template /usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template /usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/agent/cms-funcs.js /usr/share/pki/kra/webapps/kra/agent/funcs.js /usr/share/pki/kra/webapps/kra/agent/header.template /usr/share/pki/kra/webapps/kra/agent/helpfun.js /usr/share/pki/kra/webapps/kra/agent/index.jsp /usr/share/pki/kra/webapps/kra/agent/index.template /usr/share/pki/kra/webapps/kra/agent/kra /usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html /usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html /usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template /usr/share/pki/kra/webapps/kra/agent/kra/getStats.template /usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/index.jsp /usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html /usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html /usr/share/pki/kra/webapps/kra/agent/kra/monitor.template /usr/share/pki/kra/webapps/kra/agent/kra/processReq.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template /usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/top.html /usr/share/pki/kra/webapps/kra/index.jsp /usr/share/pki/kra/webapps/kra/js /usr/share/pki/kra/webapps/kra/js/key.js /usr/share/pki/kra/webapps/kra/js/keyrequest.js /usr/share/pki/kra/webapps/kra/services.template /usr/share/pki/kra/webapps/kra/ui /usr/share/pki/kra/webapps/kra/ui/home.html /usr/share/pki/kra/webapps/kra/ui/index.jsp /usr/share/pki/kra/webapps/kra/ui/key.html /usr/share/pki/kra/webapps/kra/ui/keyrequest.html /usr/share/pki/kra/webapps/kra/ui/keyrequests.html /usr/share/pki/kra/webapps/kra/ui/keys.html
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Apr 17 05:50:01 2024