Fedora 16 Update: pki-tps-9.0.7-1.fc16

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-13967
2011-10-08 23:29:26
--------------------------------------------------------------------------------

Name        : pki-tps
Product     : Fedora 16
Version     : 9.0.7
Release     : 1.fc16
URL         : http://pki.fedoraproject.org/
Summary     : Certificate System - Token Processing System
Description :
Certificate System (CS) is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.

The Token Processing System (TPS) is an optional PKI subsystem that acts
as a Registration Authority (RA) for authenticating and processing
enrollment requests, PIN reset requests, and formatting requests from
the Enterprise Security Client (ESC).

TPS is designed to communicate with tokens that conform to
Global Platform's Open Platform Specification.

TPS communicates over SSL with various PKI backend subsystems (including
the Certificate Authority (CA), the Data Recovery Manager (DRM), and the
Token Key Service (TKS)) to fulfill the user's requests.

TPS also interacts with the token database, an LDAP server that stores
information about individual tokens.

For deployment purposes, a TPS requires the following components from the
PKI Core package:

  * pki-setup
  * pki-native-tools
  * pki-selinux

and can also make use of the following optional components from the
PKI CORE package:

  * pki-silent

Additionally, Certificate System requires ONE AND ONLY ONE of the
following "Mutually-Exclusive" PKI Theme packages:

  * dogtag-pki-theme (Dogtag Certificate System deployments)
  * redhat-pki-theme (Red Hat Certificate System deployments)




==================================
||  ABOUT "CERTIFICATE SYSTEM"  ||
==================================
${overview}

--------------------------------------------------------------------------------
Update Information:

Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu)
Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
(hsm+NSS).  (jmagne)
Bugzilla Bug #737184 - TPS UI display admin user name as
"undefined TUS Administrator". (awnuk)
Bugzilla Bug #735191 - in ou=tokens, token_type not getting updated if a
card is changed from one type to another (awnuk)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode
        https://bugzilla.redhat.com/show_bug.cgi?id=730146
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update pki-tps' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------