[ol8_appstream] pki-ca-10.10.5-3.0.1.module+el8.4.0+20181+8592f730.noarch

The Certificate Authority (CA) is a required PKI subsystem which issues,
renews, revokes, and publishes certificates as well as compiling and
publishing Certificate Revocation Lists (CRLs).

The Certificate Authority can be configured as a self-signing Certificate
Authority, where it is the root CA, or it can act as a subordinate CA,
where it obtains its own signing certificate from a public CA.

Changelog (Show File list) (Show related packages)

• Thu Jun 03 2021 EL Errata <el-errata_ww@oracle.com> - 10.10.5-3.0.1

  - Remove upstream reference.

• Wed May 19 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.5-3

  - Bug 1960146 - CVE-2021-3551 Dogtag installer "pkispawn" logs admin credentials into a world-readable log file

• Tue Mar 23 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.5-2

  - Bug 1914396 - CVE-2021-20179 Unprivileged users can renew any certificate

• Tue Feb 23 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.5-1

  - Rebase to PKI 10.10.5
  - Bug 1929067 - PKI instance creation failed with new 389-ds-base build

• Mon Feb 08 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.4-1

  - Rebase to PKI 10.10.4
  - Bug 1664435 - Error instantiating class for challenge_password with SCEP request
  - Bug 1912418 - OCSP and TKS cloning failed due to duplicate replica ID
  - Bug 1916686 - Memory leak during ACME performance test
  - Bug 1919282 - ACME cert enrollment failed with HTTP 500

• Thu Jan 14 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.3-1

  - Rebase to PKI 10.10.3
  - Bug 1584550 - CRMFPopClient: unexpected behavior with -y option when values are specified
  - Bug 1590942 - CMCResponse treats -d as optional
  - Bug 1890639 - Two-step installation with external certificates fails on HSM configured system
  - Bug 1912493 - pkispawn reports incorrect FIPS mode

• Tue Dec 08 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.2-1

  - Rebase to PKI 10.10.2
  - Bug 1392616 - KRA key recovery cli kra-key-retrieve generates an invalid p12 file
  - Bug 1897120 - pki-server cert-fix command failing
  - Bug 1694664 - ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (503)

• Tue Nov 17 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.1-1

  - Rebase to PKI 10.10.1
  - Bug 1843416 - kra-audit-mod fail with Invalid event configuration
  - Bug 1889691 - ACME failed when run with more than 1 thread/connection
  - Bug 1891577 - Sub-ordinate installation is failing with NullPointerException

• Wed Oct 28 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-1

  - Rebase to PKI 10.10.0
  - Add workaround for missing capture_output in Python 3.6
  - Fix JSS initialization in pki-server <subsystem>-user-cert-add
  - Fix NPE in UGSubsystem.findUsersByKeyword()
  - Bug 1787115 - Need Method to copy SKI from CSR to Certificate signed
  - Bug 1875563 - Add KRA Transport and Storage Certificates profiles, audit for IPA
  - Bug 1883996 - Inconsistent folders in pki-tools

• Tue Oct 20 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-0.2.beta1

  - Rebase to PKI 10.10.0-beta1
  - Bug 1868233 - Disabling AIA and cert policy extensions in ACME examples