idm-pki-kra-11.5.1-1.el9 RPM for noarch

From AlmaLinux 9.5 AppStream for x86_64

IDM PKI Key Recovery Authority (KRA) is an optional subsystem that can act
as a key archival facility.  When configured in conjunction with the
Certificate Authority (CA), the KRA stores private encryption keys as part of
the certificate enrollment process.  The key archival mechanism is triggered
when a user enrolls in the PKI and creates the certificate request.  Using the
Certificate Request Message Format (CRMF) request format, a request is
generated for the user's private encryption key.  This key is then stored in
the KRA which is configured to store keys in an encrypted format that can only
be decrypted by several agents requesting the key at one time, providing for
protection of the public encryption keys for the users in the PKI deployment.

Note that the KRA archives encryption keys; it does NOT archive signing keys,
since such archival would undermine non-repudiation properties of signing keys.

Provides

• idm-pki-kra
• mvn(org.dogtagpki.pki:pki-kra)
• mvn(org.dogtagpki.pki:pki-kra:pom:)
• pki-kra

Requires

• idm-pki-server = 11.5.1-1.el9
• javapackages-filesystem
• mvn(com.fasterxml.jackson.core:jackson-annotations)
• mvn(com.fasterxml.jackson.core:jackson-core)
• mvn(com.fasterxml.jackson.core:jackson-databind)
• mvn(com.fasterxml.jackson.jaxrs:jackson-jaxrs-base)
• mvn(com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider)
• mvn(com.fasterxml.jackson.module:jackson-module-jaxb-annotations)
• mvn(commons-cli:commons-cli)
• mvn(commons-codec:commons-codec)
• mvn(commons-io:commons-io)
• mvn(commons-logging:commons-logging)
• mvn(commons-net:commons-net)
• mvn(jakarta.xml.bind:jakarta.xml.bind-api)
• mvn(org.apache.commons:commons-lang3)
• mvn(org.apache.httpcomponents:httpclient)
• mvn(org.apache.httpcomponents:httpcore)
• mvn(org.dogtagpki.pki:pki-server) = 11.5.1.SNAPSHOT
• mvn(org.jboss.logging:jboss-logging)
• mvn(org.jboss.resteasy:resteasy-client)
• mvn(org.jboss.resteasy:resteasy-jackson2-provider)
• mvn(org.jboss.resteasy:resteasy-jaxrs)
• mvn(org.jboss.resteasy:resteasy-servlet-initializer)
• mvn(org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec)
• mvn(org.slf4j:slf4j-api)
• mvn(org.slf4j:slf4j-jdk14)
• mvn(xml-apis:xml-apis)
• mvn(xml-resolver:xml-resolver)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• systemd-units
• systemd-units

License

GPL-2.0-only and LGPL-2.0-only

Changelog

* Fri Jun 21 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.1-1
  - Rebase to PKI 11.5.1
* Wed Feb 21 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.0-1
  - Rebase to PKI 11.5.0
* Mon Jun 05 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.4.2-1
  - Rebase to PKI 11.4.2
* Mon Jan 30 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled
* Wed Nov 30 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile
* Thu Aug 04 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]
* Fri Jul 01 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing

Files

/usr/share/java/pki
/usr/share/java/pki/pki-kra.jar
/usr/share/licenses/idm-pki-kra
/usr/share/licenses/idm-pki-kra/LICENSE
/usr/share/maven-metadata/pki-core-pki-kra.xml
/usr/share/maven-poms/pki
/usr/share/maven-poms/pki/pki-kra.pom
/usr/share/pki/kra
/usr/share/pki/kra/conf
/usr/share/pki/kra/conf/CS.cfg
/usr/share/pki/kra/conf/Catalina
/usr/share/pki/kra/conf/Catalina/localhost
/usr/share/pki/kra/conf/Catalina/localhost/kra.xml
/usr/share/pki/kra/conf/acl.properties
/usr/share/pki/kra/conf/auth-method.properties
/usr/share/pki/kra/conf/uriworkermap.properties
/usr/share/pki/kra/database
/usr/share/pki/kra/database/ds
/usr/share/pki/kra/database/ds/acl.ldif
/usr/share/pki/kra/database/ds/create.ldif
/usr/share/pki/kra/database/ds/index.ldif
/usr/share/pki/kra/database/ds/indextasks.ldif
/usr/share/pki/kra/database/ds/vlv.ldif
/usr/share/pki/kra/database/ds/vlvtasks.ldif
/usr/share/pki/kra/webapps
/usr/share/pki/kra/webapps/kra
/usr/share/pki/kra/webapps/kra/404.html
/usr/share/pki/kra/webapps/kra/500.html
/usr/share/pki/kra/webapps/kra/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/WEB-INF
/usr/share/pki/kra/webapps/kra/WEB-INF/classes
/usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties
/usr/share/pki/kra/webapps/kra/WEB-INF/lib
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-server.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/resteasy-servlet-intializer.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/web.xml
/usr/share/pki/kra/webapps/kra/admin
/usr/share/pki/kra/webapps/kra/admin/console
/usr/share/pki/kra/webapps/kra/agent
/usr/share/pki/kra/webapps/kra/agent/GenError.template
/usr/share/pki/kra/webapps/kra/agent/GenPending.template
/usr/share/pki/kra/webapps/kra/agent/GenRejected.template
/usr/share/pki/kra/webapps/kra/agent/GenSuccess.template
/usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template
/usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template
/usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/agent/cms-funcs.js
/usr/share/pki/kra/webapps/kra/agent/funcs.js
/usr/share/pki/kra/webapps/kra/agent/header.template
/usr/share/pki/kra/webapps/kra/agent/helpfun.js
/usr/share/pki/kra/webapps/kra/agent/index.jsp
/usr/share/pki/kra/webapps/kra/agent/index.template
/usr/share/pki/kra/webapps/kra/agent/kra
/usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html
/usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template
/usr/share/pki/kra/webapps/kra/agent/kra/getStats.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/index.jsp
/usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/monitor.template
/usr/share/pki/kra/webapps/kra/agent/kra/processReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/top.html
/usr/share/pki/kra/webapps/kra/index.jsp
/usr/share/pki/kra/webapps/kra/js
/usr/share/pki/kra/webapps/kra/js/key.js
/usr/share/pki/kra/webapps/kra/js/keyrequest.js
/usr/share/pki/kra/webapps/kra/services.template
/usr/share/pki/kra/webapps/kra/ui
/usr/share/pki/kra/webapps/kra/ui/home.html
/usr/share/pki/kra/webapps/kra/ui/index.jsp
/usr/share/pki/kra/webapps/kra/ui/key.html
/usr/share/pki/kra/webapps/kra/ui/keyrequest.html
/usr/share/pki/kra/webapps/kra/ui/keyrequests.html
/usr/share/pki/kra/webapps/kra/ui/keys.html

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Nov 15 09:00:43 2024