gLite Security Utilities

1. Release Description

This release contains the gLite Security Utilities module v. 1.2.2. The following sections provide additional information about the release content, the module dependencies, the know bugs and issues and a list of bugs closed since the previous release. For information about installing and using the gLite Security Utilities please refer to the gLite Installation and User Guides.

2. Changes in this release

2.1. Changes in functionality

The CA certificates have been upgraded to v. 1.01
The CRL ceritificates are downloaded when running the configuration script only if they are not already present (previously they were always downloaded)
The fetch-crl utility has been replaced with equivalent functionality from the edg-utils-system package

2.2. Changes in Configuration

2.2.1. New configuration parameters

The following new parameters have been added to the glite-rgma-server.cfg.xml file:

Parameter name

Default value

Description

fetch-crl.script

${EDG_LOCATION}

The full path of the fetch-crl script

[Example: ${EDG_LOCATION}/sbin/edg-fetch-crl][Type: string]

No parameters have been changed or removed in the glite-security-utils.cfg.xml file.

3. Release contents

3.1. Glite sub-deployment modules

The gLite Security Utilities module does not require any sub-modules.

3.2. Glite RPMS

The gLite Security Utilities v. 1.2.2 is composed of the following gLite components:

Component name		Version	File
glite-config	gLite configuration scripts	1.6.22	../../../../../../../glite-web/egee/packages/R1.5/R20051130/bin/rhel30/noarch/RPMS/glite-config-1.6.22-1.noarch.rpm
glite-security-utils-config	gLite Security Utilities configuration files	1.2.2	../../../../../../../glite-web/egee/packages/R1.5/R20051130/bin/rhel30/noarch/RPMS/glite-security-utils-config-1.2.2-1.noarch.rpm

4. Dependencies

The gLite Security Utilities v. 1.2.2 has the following external dependencies (the dependencies are distributed with the installer script):

Component name	Description	Version	RPM file name
ca_policy_eugridpma	Legacy compatibility package to trigger IGTF installation	1.0	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/ca_policy_eugridpma-1.0-1.noarch.rpm
edg-mkgridmap	A tool to build the grid-mapfile	2.5.1	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/edg-mkgridmap-2.5.1-1_sl3.noarch.rpm
edg-utils-system	system utilities	1.7.0	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/edg-utils-system-1.7.0-1.noarch.rpm
perl-Convert-ASN1	A set of Perl classes implementing conversion from/to ASN.1 data structures using BER/DER rules.	0.18	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Convert-ASN1-0.18-0.rhel3.dag.noarch.rpm
perl-Crypt-SSLeay	Crypt	0.51	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Crypt-SSLeay-0.51-4.i386.rpm
perl-IO-Socket-SSL	IO-Socket-SSL module for perl.	0.94	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-IO-Socket-SSL-0.94-0.dag.rhel3.noarch.rpm
perl-Net-LDAP	A set of Perl classes implementing an LDAP client.	0.2701	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-LDAP-0.2701-1.dag.rhel3.noarch.rpm
perl-Net-SSLeay	Net-SSLeay module for perl.	1.23	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-SSLeay-1.23-0.dag.rhel3.i386.rpm
perl-TermReadKey	A perl module for simple terminal control.	2.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-TermReadKey-2.20-12.i386.rpm

5. Known bugs and issues

This release has the following known bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw .

No removal procedure is provided with this release apart from the removal of the RPMS. Any account, group or other resource created during the module configuration must be manually cleaned.

This release contains the following known bugs:

Bug number	Description
#6326	Security Utilities installation script: Perl RPMs failed dependencies
#6336	glite-security-utils_installer.sh fails when there are newer rpms already installed
#10302	Installation doesn't stop if glite-security-utils_installer.sh fails

The following bugs have been fixed in this or previous releases, but they have not been officially tested yet:

Bug number	Description
#7809	glite-security-utils-config.py: wrong line in crontab
#10003	glite-security-utils-config: \'apt-get upgrade\' fails
#10062	CRL download cron default configuraiton in glite-security-utils.cfg.xml runs at fixed times
#10627	CRL download cron error stream isn't directed to /dev/null
#11404	Incompatible flag to wget used in glite-security-utils_installer.sh

6. Bugs closed since last release

This release fixes the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw

Bug number	Description
#10004	glite-security-utils: 'apt-get dist-upgrade' produces some errors while running transaction
#12745	The security utilities configuration script should be smarter in handling CRL lists