- Issued:
- 2012-02-01
- Updated:
- 2012-05-01
RHEA-2012:0081 - Product Enhancement Advisory
Synopsis
Red Hat Certificate System 8.1 General Availability
Type/Severity
Product Enhancement Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Red Hat Certificate System 8.1 is now available.
This update to Red Hat Certificate System fixes various bugs, adds numerous
enhancements, and provides a product that has been Common Criteria certified to
comply with NIAP/CIMC PP at EAL4 augmented with ALC_FLR.2.
Description
Red Hat Certificate System (RHCS) is a complete implementation of an enterprise
software system designed to manage enterprise Public Key Infrastructure (PKI)
deployments.
The RHCS has six highly-configurable subsystems, which provide flexibility in
designing the PKI:
- The Certificate Authority (CA) is the subsystem that provides certificate
management functionality for issuing, renewing, revoking, and publishing
certificates and creating and publishing certificate revocation lists (CRLs).
- The Data Recovery Manager (DRM) is an optional subsystem that provides private
encryption key storage and retrieval.
- The Online Certificate Status Protocol (OCSP) Manager is an optional subsystem
that provides OCSP responder services, which means it stores CRLs for CAs and
can distribute the load for verifying certificate status.
- The Registration Authority (RA) is a subsystem that provides local enrollment
request verifications.
- The Token Key Service (TKS) manages one or more master keys required to set up
secure channels directly to the token management system. The privileged
operations such as key generation can only be requested on the tokens through a
secure channel.
- The Token Processing System (TPS) provides the registration authority
functionality in the token management infrastructure and establishes secure
channels between the Enterprise Security Client (ESC) and the back-end
subsystems.
Many of the subcomponents that comprise Red Hat Certificate System (such as
Apache, Tomcat, and NSS) are provided by the base operating system. Only the
default versions that ship with Red Hat Enterprise Linux 5.6 or later are
supported. In some cases, the RHCS product may deliver packages that replace the
base Red Hat Enterprise Linux packages. In those cases, support is available for
the replaced packages.
The primary purpose of this release is to achieve Common Criteria certification,
but it also provides a number of bug fixes and enhancements. Users are directed
to the Red Hat Certificate System 8.1 Release Notes for information on the most
significant of these changes:
https://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Release_Notes/
All users of Red Hat Enterprise Certificate System are advised to install this
new release, which provides numerous bug fixes and enhancements.
Solution
Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Certificate System 8 x86_64
- Red Hat Certificate System 8 i386
Fixes
(none)CVEs
(none)
Red Hat Certificate System 8
SRPM | |
---|---|
idm-console-framework-1.1.5-1.el5idm.src.rpm | SHA-256: 887d3f24194557ff7028edec89c7772c0c3fb9dd4fe6ef5111d0922022ee846a |
jss-4.2.6-21.99.el5idm.src.rpm | SHA-256: 1b02a10222953924088846ef710a00a23614bfcea7fb7c608b794d387ede8439 |
nuxwdog-1.0.1-1.el5pki.src.rpm | SHA-256: 6cf3f25fd242764ce89a9d72cc9e156e5ff11da5de7ddb5982b92f9064063267 |
osutil-1.2.0-2.el5pki.src.rpm | SHA-256: fcd9b42167d6a699fec00091be5924b8fc3b2708f054419aab6637d029314166 |
pki-ca-8.1.0-10.el5pki.src.rpm | SHA-256: afaf4e97b657adaa67c3f8b67f052f41e40aa93bffb1a539afece1375f7a6275 |
pki-common-8.1.0-23.el5pki.src.rpm | SHA-256: ca0a0d62364e450ef7e13a840d77a45216e555480b75a3de24b4800fbc562d4b |
pki-console-8.1.0-5.el5pki.src.rpm | SHA-256: 4c401edecb5c2551c50548e7391cd0b43bc0e7dce9f1fe4f8594362920e4e13a |
pki-java-tools-8.1.0-6.el5pki.src.rpm | SHA-256: 1052198c3f164ba00e2d39279c82769a7ef1f89263b437b85c95a78a92ceef11 |
pki-kra-8.1.0-11.el5pki.src.rpm | SHA-256: b7f82e95b3c6c90047a3b771d181abd1864f63cf55ea5deb326268e8500818a5 |
pki-migrate-8.1.0-10.el5pki.src.rpm | SHA-256: cc47aebc138746cfe471917c943f7e2c0959a04fe196025377ae1da0e4a8848a |
pki-native-tools-8.1.0-7.el5pki.src.rpm | SHA-256: 0003c370021144994f1f63b918bf4fadd51a07a53f8cf3130ba7959ca2262d3d |
pki-ocsp-8.1.0-8.el5pki.src.rpm | SHA-256: fd525c7659c4a1d3e9879238f9f4652bb162a945a33e8450bc13947beae8159e |
pki-ra-8.1.0-7.el5pki.src.rpm | SHA-256: 621d9c24ed812643821312ca87155224c076bf578b762d51d248932ee3bbc89d |
pki-selinux-8.1.0-2.el5pki.src.rpm | SHA-256: 2e9947cca2193cc4293bbc0f28236ac8b68e138aa218afbe7919cca566194fa3 |
pki-setup-8.1.0-4.el5pki.src.rpm | SHA-256: 7cf15f76014e3e96d9caeefd6ae40a687ed66327097fa54843448b7e43a8a299 |
pki-silent-8.1.0-2.el5pki.src.rpm | SHA-256: f671cbafa7f2a20d17bf03ed37031fc15894bcba1d18cd2b6b1036e7f0628abe |
pki-tks-8.1.0-8.el5pki.src.rpm | SHA-256: 57548460508871c377f829f4f10fcb58eb59195e4527599860f8c0a8842a11e2 |
pki-tps-8.1.0-20.el5pki.src.rpm | SHA-256: f6299fe8b77b3c18311f7c90402e9c28be7fe36efd5f4d39b24b75ba845a9788 |
pki-util-8.1.0-6.el5pki.src.rpm | SHA-256: 9e01ec6e9cadaf41f9c1c384f576de52d56eb0df68f2d2769e3a0b1529455204 |
redhat-pki-ca-ui-8.1.0-8.el5pki.src.rpm | SHA-256: 90444c452fd5ddb80a3dee6781ab7ddc686d4446e8890faf4812498df9fdf443 |
redhat-pki-common-ui-8.1.0-2.el5pki.src.rpm | SHA-256: d3a83c93e776d17de0412e0780fd4e5e80af4f01665a1b333a2e340b67a88de9 |
redhat-pki-console-ui-8.1.0-2.el5pki.src.rpm | SHA-256: d4f10a3215716cc6baa53e036df87aa98af4d3ebae79079fcd11f8ec7263b0b9 |
redhat-pki-kra-ui-8.1.0-6.el5pki.src.rpm | SHA-256: 162c7ba1c897e0498b8272c39ab9d4e1197948b775e99decf7380a12ea98c37d |
redhat-pki-ocsp-ui-8.1.0-5.el5pki.src.rpm | SHA-256: 1d6c383277cf1700ee73498151aed6a29a3cf72c030edfe9abb39bc8c843a12c |
redhat-pki-ra-ui-8.1.0-4.el5pki.src.rpm | SHA-256: 5a127f56846aad139df1b713e9b09a282a3edb93a799c7b58f01c9f1c3a4de51 |
redhat-pki-tks-ui-8.1.0-4.el5pki.src.rpm | SHA-256: 0930b6939ea0bd3eb7eae4260435b29a67685ebdc8c24fa60ee1c9c7c7cf850a |
redhat-pki-tps-ui-8.1.0-7.el5pki.src.rpm | SHA-256: affe7fbda61a6cf009df3a5a80d5737fd1da1e61f35f9cad953c0f57a568b497 |
symkey-1.2.0-3.el5pki.src.rpm | SHA-256: 581c20670c0326320b565ebe8058bacc2dec61aab24481185a1446cdad5c94af |
tomcatjss-1.1.4-5.el5idm.src.rpm | SHA-256: 6fca314b5ae1db6d3e358c55e3d8f436f2b008c461d1538e42e78b414c9f263a |
x86_64 | |
idm-console-framework-1.1.5-1.el5idm.noarch.rpm | SHA-256: 50a1c649c6403b7539b44cf68db7af2675eb3b5fa91b4bb1ae3b2ff3f02c4d2b |
jss-4.2.6-21.99.el5idm.x86_64.rpm | SHA-256: da0f070fc291e0f36c399130cbea3cafc6d66f5c63609a74cef307b522655a22 |
jss-javadoc-4.2.6-21.99.el5idm.x86_64.rpm | SHA-256: 6cfda9b438d850d9d6631a90a96d5e4893dd0fb5533cecdb64115c943f7485f6 |
nuxwdog-1.0.1-1.el5pki.x86_64.rpm | SHA-256: 2745c414e719b50561d4ac741f3fcab142538105b48fa8cd0c5ba4b59a484730 |
nuxwdog-client-java-1.0.1-1.el5pki.x86_64.rpm | SHA-256: 6b860986d9793ebacff33d28b46bc935e1aa5d9dd96fd65657e31a34aa3984e3 |
nuxwdog-devel-1.0.1-1.el5pki.x86_64.rpm | SHA-256: 2a5a2eb20e0e999d07152f9487806a0777d5ddb6395a02a8f0effaaf13283438 |
osutil-1.2.0-2.el5pki.x86_64.rpm | SHA-256: b89952ce48609228cc6a5377fb7f27e1dea9d1960f9a0efc211d08fc2e331f6d |
pki-ca-8.1.0-10.el5pki.noarch.rpm | SHA-256: 61d41a3e0b894f477a8b7758b7c81d673b6b0284180da718b12b09e3ff27c004 |
pki-common-8.1.0-23.el5pki.noarch.rpm | SHA-256: 9699dccac1b697db2a4ab1807b400e22a27e88cdcf73b6f728eeea91be31e47d |
pki-common-javadoc-8.1.0-23.el5pki.noarch.rpm | SHA-256: ee220ebba4d9afd14a1066497758f7ab1b8b148d54893967fa66d5825967af1d |
pki-console-8.1.0-5.el5pki.noarch.rpm | SHA-256: 1f44af5ca877e33a7c50a4e645eec3aff80b14bdd914a4e9a1b96fccf2edd099 |
pki-java-tools-8.1.0-6.el5pki.noarch.rpm | SHA-256: 13656429f03274c72b370fba9341f3711de06860c59fe4917cb3d70c0c253692 |
pki-java-tools-javadoc-8.1.0-6.el5pki.noarch.rpm | SHA-256: f32e67d16a060cfc974c9c39a1988ea5180ce70f684a50d8f93c8a0e73c1a9e5 |
pki-kra-8.1.0-11.el5pki.noarch.rpm | SHA-256: a839e147b28682b4217120e173cce080bbbbb263bed0357764db522948be1bf7 |
pki-migrate-8.1.0-10.el5pki.noarch.rpm | SHA-256: b4ff704b137f409fac446d6d3af443d71543c04f7ba6ed03a4bc6245787b06ed |
pki-native-tools-8.1.0-7.el5pki.x86_64.rpm | SHA-256: ec1f4818551caed1d5f6d3a3a2bd875d3f27f26696a4debb238a357ab3860f6a |
pki-ocsp-8.1.0-8.el5pki.noarch.rpm | SHA-256: 4018136652085a8f6e353a284a98d8951ca808be51847461083e8da69cb2c4a2 |
pki-ra-8.1.0-7.el5pki.noarch.rpm | SHA-256: 552cc7cbec7f3d321cf16268aa6f02395a22f08d5fc3c8bc327630292e6de6d1 |
pki-selinux-8.1.0-2.el5pki.noarch.rpm | SHA-256: 0bc4fca5d997846c5d977750d91db449bfa4fc342f1d1c1bc4c97063e45d9e3b |
pki-setup-8.1.0-4.el5pki.noarch.rpm | SHA-256: 8a773f73035d98b82b1954de147c58cf55ccfdaa6cb4cc5391e6676a3aa962a8 |
pki-silent-8.1.0-2.el5pki.noarch.rpm | SHA-256: 1108d16a1ad53375d36b300746661e2e2e790e7c643d4c86ae4a313eab2b5440 |
pki-tks-8.1.0-8.el5pki.noarch.rpm | SHA-256: 667832dd81365d08d29801005e5f78799a10b424d10afacd3e20a34d8e3ea821 |
pki-tps-8.1.0-20.el5pki.x86_64.rpm | SHA-256: 2d8f72e3c667c0e8deaaac8d48eb12bc5466d132d5297864b3c2636ea3aefc30 |
pki-util-8.1.0-6.el5pki.noarch.rpm | SHA-256: 1deed68cd3a44fc264f3118248ebde76e2c37882e113bb912a15660d5f4a5b7c |
pki-util-javadoc-8.1.0-6.el5pki.noarch.rpm | SHA-256: 7beb36eef588fc84ef92108364c29a7b1f9bfd0d22373faad2dba35692173de8 |
redhat-pki-ca-ui-8.1.0-8.el5pki.noarch.rpm | SHA-256: cbe83189401f0d1fd9b4e3ea8e350f6a1dd3f6f22cb0fa59a54801d62ab448d4 |
redhat-pki-common-ui-8.1.0-2.el5pki.noarch.rpm | SHA-256: 25e5e04fb39807a8524d9550fb370e53e19ad717e650c7172dd73e50d6ae6d57 |
redhat-pki-console-ui-8.1.0-2.el5pki.noarch.rpm | SHA-256: 2a94df93d1545c078ea986e2e4def92751de4b13f80d3af11c7e12a8ae4e10ff |
redhat-pki-kra-ui-8.1.0-6.el5pki.noarch.rpm | SHA-256: 62bcc56cceb8b000a1e33b30ce0a13443ec12b22551bc73476befbf55311a7db |
redhat-pki-ocsp-ui-8.1.0-5.el5pki.noarch.rpm | SHA-256: 0062bdaa547655549e71d12bc846b8d6638a8da9110f29db17aed94c34ded376 |
redhat-pki-ra-ui-8.1.0-4.el5pki.noarch.rpm | SHA-256: 265043bbf66a4c46645d739cfbb07a2102383581ac2c68821b9835902572fbf0 |
redhat-pki-tks-ui-8.1.0-4.el5pki.noarch.rpm | SHA-256: 4015eed415ff62ba607a447e8977876548517716f4361303e0ec918bcc5346fe |
redhat-pki-tps-ui-8.1.0-7.el5pki.noarch.rpm | SHA-256: 2d35364de931e1cd298922658afb6aab09908b928c847dcdf8993b7775de9dd5 |
symkey-1.2.0-3.el5pki.x86_64.rpm | SHA-256: 54af0cdb4899f84b42afda64b83514d3557937366b453a51f5a0554d91963ec7 |
tomcatjss-1.1.4-5.el5idm.noarch.rpm | SHA-256: 57db37c287e1d4dbf22f9e94f87897989bfa6f22caa1f11f481b8cec879f5ae1 |
i386 | |
idm-console-framework-1.1.5-1.el5idm.noarch.rpm | SHA-256: 50a1c649c6403b7539b44cf68db7af2675eb3b5fa91b4bb1ae3b2ff3f02c4d2b |
jss-4.2.6-21.99.el5idm.i386.rpm | SHA-256: 887e7832f20c0863246fb9c337e3c84498fecc402c1e8aae334669277a55573d |
jss-javadoc-4.2.6-21.99.el5idm.i386.rpm | SHA-256: e10cad8dd29759a02f9844b7025c2509d6f26a4eac98ef9d354e201d8753e4b1 |
nuxwdog-1.0.1-1.el5pki.i386.rpm | SHA-256: 89ba0809ebabe4f124e52fde672920328ddc3892ef54ea6f11c92b9961e7b4c7 |
nuxwdog-client-java-1.0.1-1.el5pki.i386.rpm | SHA-256: 7ac56ca0bee062a55198e3a4eeda85dc0595563a431d21c3fb33cc132e7b7229 |
nuxwdog-devel-1.0.1-1.el5pki.i386.rpm | SHA-256: 49cb228c6829547a686d39bdb8b536632784a58fc485eb643986db99e7e7c775 |
osutil-1.2.0-2.el5pki.i386.rpm | SHA-256: 8833315ee6743bbc7fb79e5148b8badb39946bbe6543def55732c6e67aa92029 |
pki-ca-8.1.0-10.el5pki.noarch.rpm | SHA-256: 61d41a3e0b894f477a8b7758b7c81d673b6b0284180da718b12b09e3ff27c004 |
pki-common-8.1.0-23.el5pki.noarch.rpm | SHA-256: 9699dccac1b697db2a4ab1807b400e22a27e88cdcf73b6f728eeea91be31e47d |
pki-common-javadoc-8.1.0-23.el5pki.noarch.rpm | SHA-256: ee220ebba4d9afd14a1066497758f7ab1b8b148d54893967fa66d5825967af1d |
pki-console-8.1.0-5.el5pki.noarch.rpm | SHA-256: 1f44af5ca877e33a7c50a4e645eec3aff80b14bdd914a4e9a1b96fccf2edd099 |
pki-java-tools-8.1.0-6.el5pki.noarch.rpm | SHA-256: 13656429f03274c72b370fba9341f3711de06860c59fe4917cb3d70c0c253692 |
pki-java-tools-javadoc-8.1.0-6.el5pki.noarch.rpm | SHA-256: f32e67d16a060cfc974c9c39a1988ea5180ce70f684a50d8f93c8a0e73c1a9e5 |
pki-kra-8.1.0-11.el5pki.noarch.rpm | SHA-256: a839e147b28682b4217120e173cce080bbbbb263bed0357764db522948be1bf7 |
pki-migrate-8.1.0-10.el5pki.noarch.rpm | SHA-256: b4ff704b137f409fac446d6d3af443d71543c04f7ba6ed03a4bc6245787b06ed |
pki-native-tools-8.1.0-7.el5pki.i386.rpm | SHA-256: 67adfc500f833ace8fe0a39864917ba2255ce75298ca9015d87226f7dd30c435 |
pki-ocsp-8.1.0-8.el5pki.noarch.rpm | SHA-256: 4018136652085a8f6e353a284a98d8951ca808be51847461083e8da69cb2c4a2 |
pki-ra-8.1.0-7.el5pki.noarch.rpm | SHA-256: 552cc7cbec7f3d321cf16268aa6f02395a22f08d5fc3c8bc327630292e6de6d1 |
pki-selinux-8.1.0-2.el5pki.noarch.rpm | SHA-256: 0bc4fca5d997846c5d977750d91db449bfa4fc342f1d1c1bc4c97063e45d9e3b |
pki-setup-8.1.0-4.el5pki.noarch.rpm | SHA-256: 8a773f73035d98b82b1954de147c58cf55ccfdaa6cb4cc5391e6676a3aa962a8 |
pki-silent-8.1.0-2.el5pki.noarch.rpm | SHA-256: 1108d16a1ad53375d36b300746661e2e2e790e7c643d4c86ae4a313eab2b5440 |
pki-tks-8.1.0-8.el5pki.noarch.rpm | SHA-256: 667832dd81365d08d29801005e5f78799a10b424d10afacd3e20a34d8e3ea821 |
pki-tps-8.1.0-20.el5pki.i386.rpm | SHA-256: 1163e84e1769906e361cf32fe4d6996df121b857e41450e1d003f57aa8c52f43 |
pki-util-8.1.0-6.el5pki.noarch.rpm | SHA-256: 1deed68cd3a44fc264f3118248ebde76e2c37882e113bb912a15660d5f4a5b7c |
pki-util-javadoc-8.1.0-6.el5pki.noarch.rpm | SHA-256: 7beb36eef588fc84ef92108364c29a7b1f9bfd0d22373faad2dba35692173de8 |
redhat-pki-ca-ui-8.1.0-8.el5pki.noarch.rpm | SHA-256: cbe83189401f0d1fd9b4e3ea8e350f6a1dd3f6f22cb0fa59a54801d62ab448d4 |
redhat-pki-common-ui-8.1.0-2.el5pki.noarch.rpm | SHA-256: 25e5e04fb39807a8524d9550fb370e53e19ad717e650c7172dd73e50d6ae6d57 |
redhat-pki-console-ui-8.1.0-2.el5pki.noarch.rpm | SHA-256: 2a94df93d1545c078ea986e2e4def92751de4b13f80d3af11c7e12a8ae4e10ff |
redhat-pki-kra-ui-8.1.0-6.el5pki.noarch.rpm | SHA-256: 62bcc56cceb8b000a1e33b30ce0a13443ec12b22551bc73476befbf55311a7db |
redhat-pki-ocsp-ui-8.1.0-5.el5pki.noarch.rpm | SHA-256: 0062bdaa547655549e71d12bc846b8d6638a8da9110f29db17aed94c34ded376 |
redhat-pki-ra-ui-8.1.0-4.el5pki.noarch.rpm | SHA-256: 265043bbf66a4c46645d739cfbb07a2102383581ac2c68821b9835902572fbf0 |
redhat-pki-tks-ui-8.1.0-4.el5pki.noarch.rpm | SHA-256: 4015eed415ff62ba607a447e8977876548517716f4361303e0ec918bcc5346fe |
redhat-pki-tps-ui-8.1.0-7.el5pki.noarch.rpm | SHA-256: 2d35364de931e1cd298922658afb6aab09908b928c847dcdf8993b7775de9dd5 |
symkey-1.2.0-3.el5pki.i386.rpm | SHA-256: 69b8620af18021dfc5cc0afd8439e3d5739fa8ae936dba10baf0bd1201c73d9d |
tomcatjss-1.1.4-5.el5idm.noarch.rpm | SHA-256: 57db37c287e1d4dbf22f9e94f87897989bfa6f22caa1f11f481b8cec879f5ae1 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.