Fedora 16 Update: pki-core-9.0.15-1.fc16

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-13981
2011-10-08 23:30:05
--------------------------------------------------------------------------------

Name        : pki-core
Product     : Fedora 16
Version     : 9.0.15
Release     : 1.fc16
URL         : http://pki.fedoraproject.org/
Summary     : Certificate System - PKI Core Components
Description :
==================================
||  ABOUT "CERTIFICATE SYSTEM"  ||
==================================

Certificate System (CS) is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.

PKI Core contains fundamental packages required by Certificate System,
and consists of the following components:

  * pki-setup
  * pki-symkey
  * pki-native-tools
  * pki-util
  * pki-util-javadoc
  * pki-java-tools
  * pki-java-tools-javadoc
  * pki-common
  * pki-common-javadoc
  * pki-selinux
  * pki-ca
  * pki-silent

which comprise the following PKI subsystems:

  * Certificate Authority (CA)

For deployment purposes, Certificate System requires ONE AND ONLY ONE
of the following "Mutually-Exclusive" PKI Theme packages:

  * ipa-pki-theme    (IPA deployments)
  * dogtag-pki-theme (Dogtag Certificate System deployments)
  * redhat-pki-theme (Red Hat Certificate System deployments)

--------------------------------------------------------------------------------
Update Information:

Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
Bugzilla Bug #699809 - Convert CS to use systemd (alee)
'pki-setup'
Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
mode (cfu)
Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee)
'pki-symkey'
Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
(hsm+NSS). (jmagne)
'pki-native-tools'
Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
mode (cfu)
'pki-util'
Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
mode (cfu)
'pki-java-tools'
'pki-common'
Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
mode (cfu)
Bugzilla Bug #737218 - Incorrect request attribute name matching
ignores request attributes during request parsing. (awnuk)
Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
(hsm+NSS). (jmagne)
'pki-selinux'
Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee)
'pki-ca'
Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW (alee)
Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
mode (cfu)
'pki-silent'
Bugzilla Bug #739201 - pkisilent does not take arch into account
as Java packages migrated to arch-dependent directories (mharmsen)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #699809 - Convert certificate system to use systemd
        https://bugzilla.redhat.com/show_bug.cgi?id=699809
  [ 2 ] Bug #712931 - CS requires too many ports to be open in the FW.
        https://bugzilla.redhat.com/show_bug.cgi?id=712931
  [ 3 ] Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode
        https://bugzilla.redhat.com/show_bug.cgi?id=730146
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update pki-core' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------