Fedora 21 Update: pki-core-10.2.0-5.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-16307
2014-12-05 00:23:31
--------------------------------------------------------------------------------

Name        : pki-core
Product     : Fedora 21
Version     : 10.2.0
Release     : 5.fc21
URL         : http://pki.fedoraproject.org/
Summary     : Certificate System - PKI Core Components
Description :
==================================
||  ABOUT "CERTIFICATE SYSTEM"  ||
==================================

Certificate System (CS) is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.

PKI Core contains ALL top-level java-based Tomcat PKI components:

  * pki-symkey
  * pki-base
  * pki-tools
  * pki-server
  * pki-ca
  * pki-kra
  * pki-ocsp
  * pki-tks
  * pki-tps
  * pki-javadoc

which comprise the following corresponding PKI subsystems:

  * Certificate Authority (CA)
  * Data Recovery Manager (DRM)
  * Online Certificate Status Protocol (OCSP) Manager
  * Token Key Service (TKS)
  * Token Processing Service (TPS)

For deployment purposes, PKI Core contains fundamental packages
required by BOTH native-based Apache AND java-based Tomcat
Certificate System instances consisting of the following components:

  * pki-tools

Additionally, PKI Core contains the following fundamental packages
required ONLY by ALL java-based Tomcat Certificate System instances:

  * pki-symkey
  * pki-base
  * pki-tools
  * pki-server

PKI Core also includes the following components:

  * pki-javadoc

Finally, if Certificate System is being deployed as an individual or
set of standalone rather than embedded server(s)/service(s), it is
strongly recommended (though not explicitly required) to include at
least one PKI Theme package:

  * dogtag-pki-theme (Dogtag Certificate System deployments)
    * dogtag-pki-server-theme
  * redhat-pki-server-theme (Red Hat Certificate System deployments)
    * redhat-pki-server-theme
  * customized pki theme (Customized Certificate System deployments)
    * <customized>-pki-server-theme

  NOTE:  As a convenience for standalone deployments, top-level meta
         packages may be provided which bind a particular theme to
         these certificate server packages.

--------------------------------------------------------------------------------
Update Information:

Bugzilla Bug #1158410 - add TLS range support to server.xml by default and upgrade
--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec  2 2014 Matthew Harmsen <mharmsen at redhat.com> - 10.2.0-5
- Bugzilla Bug #1165351 - Errata TPS test fails due to dependent packages not
  found (mharmsen)
- PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen)
- Bugzilla Bug #1151147 - issuerDN encoding correction (cfu)
* Mon Nov 24 2014 Christina Fu <cfu at redhat.com> 10.2.0-4
- Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade
- up the release number to 4
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1158410 - ipa-server-install failing with error message - CA did not start in 300.0s
        https://bugzilla.redhat.com/show_bug.cgi?id=1158410
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update pki-core' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------