idm-pki-kra-11.5.0-0.1.alpha8.el9 RPM for noarch

From CentOS Stream 9 AppStream for aarch64

IDM PKI Key Recovery Authority (KRA) is an optional subsystem that can act
as a key archival facility.  When configured in conjunction with the
Certificate Authority (CA), the KRA stores private encryption keys as part of
the certificate enrollment process.  The key archival mechanism is triggered
when a user enrolls in the PKI and creates the certificate request.  Using the
Certificate Request Message Format (CRMF) request format, a request is
generated for the user's private encryption key.  This key is then stored in
the KRA which is configured to store keys in an encrypted format that can only
be decrypted by several agents requesting the key at one time, providing for
protection of the public encryption keys for the users in the PKI deployment.

Note that the KRA archives encryption keys; it does NOT archive signing keys,
since such archival would undermine non-repudiation properties of signing keys.

Provides

• idm-pki-kra
• mvn(org.dogtagpki.pki:pki-kra)
• mvn(org.dogtagpki.pki:pki-kra:pom:)
• pki-kra

Requires

• idm-pki-server = 11.5.0-0.1.alpha8.el9
• javapackages-filesystem
• mvn(com.fasterxml.jackson.core:jackson-annotations)
• mvn(com.fasterxml.jackson.core:jackson-core)
• mvn(com.fasterxml.jackson.core:jackson-databind)
• mvn(com.fasterxml.jackson.jaxrs:jackson-jaxrs-base)
• mvn(com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider)
• mvn(com.fasterxml.jackson.module:jackson-module-jaxb-annotations)
• mvn(commons-cli:commons-cli)
• mvn(commons-codec:commons-codec)
• mvn(commons-io:commons-io)
• mvn(commons-logging:commons-logging)
• mvn(commons-net:commons-net)
• mvn(jakarta.xml.bind:jakarta.xml.bind-api)
• mvn(org.apache.commons:commons-lang3)
• mvn(org.apache.httpcomponents:httpclient)
• mvn(org.apache.httpcomponents:httpcore)
• mvn(org.dogtagpki.pki:pki-server) = 11.5.0.SNAPSHOT
• mvn(org.jboss.logging:jboss-logging)
• mvn(org.jboss.resteasy:resteasy-client)
• mvn(org.jboss.resteasy:resteasy-jackson2-provider)
• mvn(org.jboss.resteasy:resteasy-jaxrs)
• mvn(org.jboss.resteasy:resteasy-servlet-initializer)
• mvn(org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec)
• mvn(org.slf4j:slf4j-api)
• mvn(org.slf4j:slf4j-jdk14)
• mvn(xml-apis:xml-apis)
• mvn(xml-resolver:xml-resolver)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• systemd-units
• systemd-units

License

GPL-2.0-only and LGPL-2.0-only

Changelog

* Mon Jun 05 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.4.2-1
  - Rebase to PKI 11.4.2
* Mon Jan 30 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled
* Wed Nov 30 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile
* Thu Aug 04 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]
* Fri Jul 01 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing
* Fri May 06 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]
* Mon May 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.3.beta2
  - Rebase to PKI 11.2.0-beta2
  - Rename packages to idm-pki
* Mon Apr 18 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.2.beta1
  - Rebase to PKI 11.2.0-beta1
* Wed Jan 19 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser
* Thu Dec 02 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.1-3
  - Change gcc compiler flags to fix annobin gating failures
* Tue Nov 23 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.1-2
  - Rebase to PKI 11.0.1
* Tue Oct 05 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-1
  - Rebase to PKI 11.0.0
* Thu Sep 30 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.6.beta1
  - Rebase to PKI 11.0.0-beta1
  - Bug #1999052 - pki instance creation fails for IPA server
* Thu Sep 09 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.5.alpha1
  - Drop BuildRequires and Requires on glassfish-jaxb-api and jaxb-impl
    Resolves #2002594
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 11.0.0-0.4.alpha1
  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688
* Thu Jul 01 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.3
  - Drop sudo dependency
* Tue Jun 29 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.2
  - Resolves: rhbz#1975406 - IPA installation fails during pki-tomcatd setup.
* Fri Jun 25 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.0-0.1
  - Rebase to PKI 11.0.0-alpha1

Files

/usr/share/java/pki
/usr/share/java/pki/pki-kra.jar
/usr/share/licenses/idm-pki-kra
/usr/share/licenses/idm-pki-kra/LICENSE
/usr/share/maven-metadata/pki-core-pki-kra.xml
/usr/share/maven-poms/pki
/usr/share/maven-poms/pki/pki-kra.pom
/usr/share/pki/kra
/usr/share/pki/kra/conf
/usr/share/pki/kra/conf/CS.cfg
/usr/share/pki/kra/conf/Catalina
/usr/share/pki/kra/conf/Catalina/localhost
/usr/share/pki/kra/conf/Catalina/localhost/kra.xml
/usr/share/pki/kra/conf/acl.properties
/usr/share/pki/kra/conf/auth-method.properties
/usr/share/pki/kra/conf/uriworkermap.properties
/usr/share/pki/kra/database
/usr/share/pki/kra/database/ds
/usr/share/pki/kra/database/ds/acl.ldif
/usr/share/pki/kra/database/ds/create.ldif
/usr/share/pki/kra/database/ds/index.ldif
/usr/share/pki/kra/database/ds/indextasks.ldif
/usr/share/pki/kra/database/ds/vlv.ldif
/usr/share/pki/kra/database/ds/vlvtasks.ldif
/usr/share/pki/kra/webapps
/usr/share/pki/kra/webapps/kra
/usr/share/pki/kra/webapps/kra/404.html
/usr/share/pki/kra/webapps/kra/500.html
/usr/share/pki/kra/webapps/kra/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/WEB-INF
/usr/share/pki/kra/webapps/kra/WEB-INF/classes
/usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties
/usr/share/pki/kra/webapps/kra/WEB-INF/lib
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-server.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/resteasy-servlet-intializer.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/web.xml
/usr/share/pki/kra/webapps/kra/admin
/usr/share/pki/kra/webapps/kra/admin/console
/usr/share/pki/kra/webapps/kra/agent
/usr/share/pki/kra/webapps/kra/agent/GenError.template
/usr/share/pki/kra/webapps/kra/agent/GenPending.template
/usr/share/pki/kra/webapps/kra/agent/GenRejected.template
/usr/share/pki/kra/webapps/kra/agent/GenSuccess.template
/usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template
/usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template
/usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/agent/cms-funcs.js
/usr/share/pki/kra/webapps/kra/agent/funcs.js
/usr/share/pki/kra/webapps/kra/agent/header.template
/usr/share/pki/kra/webapps/kra/agent/helpfun.js
/usr/share/pki/kra/webapps/kra/agent/index.jsp
/usr/share/pki/kra/webapps/kra/agent/index.template
/usr/share/pki/kra/webapps/kra/agent/kra
/usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html
/usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template
/usr/share/pki/kra/webapps/kra/agent/kra/getStats.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/index.jsp
/usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/monitor.template
/usr/share/pki/kra/webapps/kra/agent/kra/processReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/top.html
/usr/share/pki/kra/webapps/kra/index.jsp
/usr/share/pki/kra/webapps/kra/js
/usr/share/pki/kra/webapps/kra/js/key.js
/usr/share/pki/kra/webapps/kra/js/keyrequest.js
/usr/share/pki/kra/webapps/kra/services.template
/usr/share/pki/kra/webapps/kra/ui
/usr/share/pki/kra/webapps/kra/ui/home.html
/usr/share/pki/kra/webapps/kra/ui/index.jsp
/usr/share/pki/kra/webapps/kra/ui/key.html
/usr/share/pki/kra/webapps/kra/ui/keyrequest.html
/usr/share/pki/kra/webapps/kra/ui/keyrequests.html
/usr/share/pki/kra/webapps/kra/ui/keys.html

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Jan 25 10:15:32 2025