معرفی شرکت ها

pki-kra-10.5.18-19.el7_9.noarch.rpm

Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر

توضیحات

Certificate System - Key Recovery Authority
ویژگی مقدار
سیستم عامل Linux
توزیع CentOS 7
مخزن Centos updates noarch
نام بسته pki-kra
نام فایل بسته pki-kra-10.5.18-19.el7_9.noarch.rpm
نسخه بسته 10.5.18
انتشار بسته 19.el7_9
معماری بسته noarch
نگهدارنده -
تاریخ ساخت Thu 13 Jan 2022 08
هاست سازنده x86-02.bsys.centos.org
نوع بسته .rpm
آدرس صفحه اصلی http://pki.fedoraproject.org/
مجوز GPLv2
حجم دانلود 314K
حجم نصب 506.233K
The Key Recovery Authority (KRA) is an optional PKI subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user's private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys. This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains ALL top-level java-based Tomcat PKI components: * pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc which comprise the following corresponding PKI subsystems: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework. Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities. Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc. Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package: * dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * <customized>-pki-server-theme NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.


جایگزین ها

بسته نسخه معماری مخزن
pki-kra-10.5.18-7.el7.noarch.rpm 10.5.18 noarch CentOS os
pki-kra-10.5.18-12.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-24.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-18.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-15.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-16.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-21.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-17.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-27.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-25.el7_9.noarch.rpm 10.5.18 noarch CentOS updates
pki-kra-10.5.18-14.el7_9.noarch.rpm 10.5.18 noarch CentOS updates


نیازمندی

مقدار نام
- java-1.8.0-openjdk-headless
= 10.5.18-19.el7_9 pki-server
- systemd-units
- systemd-units
- systemd-units


ارائه دهنده

مقدار نام
= 10.5.18-19.el7_9 pki-kra


نحوه نصب


نصب پکیج rpm pki-kra:

    sudo yum localinstall pki-kra-10.5.18-19.el7_9.noarch.rpm


فایل ها

مسیرها
/usr/share/doc/pki-kra-10.5.18
/usr/share/doc/pki-kra-10.5.18/LICENSE
/usr/share/java/pki/pki-kra.jar
/usr/share/pki/kra
/usr/share/pki/kra/conf
/usr/share/pki/kra/conf/CS.cfg
/usr/share/pki/kra/conf/Catalina
/usr/share/pki/kra/conf/Catalina/localhost
/usr/share/pki/kra/conf/Catalina/localhost/kra.xml
/usr/share/pki/kra/conf/acl.ldif
/usr/share/pki/kra/conf/acl.properties
/usr/share/pki/kra/conf/auth-method.properties
/usr/share/pki/kra/conf/db.ldif
/usr/share/pki/kra/conf/index.ldif
/usr/share/pki/kra/conf/indextasks.ldif
/usr/share/pki/kra/conf/jk2.manifest
/usr/share/pki/kra/conf/jk2.properties
/usr/share/pki/kra/conf/jkconf.ant.xml
/usr/share/pki/kra/conf/jkconfig.manifest
/usr/share/pki/kra/conf/server-minimal.xml
/usr/share/pki/kra/conf/shm.manifest
/usr/share/pki/kra/conf/tomcat-jk2.manifest
/usr/share/pki/kra/conf/tomcat-users.xml
/usr/share/pki/kra/conf/uriworkermap.properties
/usr/share/pki/kra/conf/vlv.ldif
/usr/share/pki/kra/conf/vlvtasks.ldif
/usr/share/pki/kra/conf/workers.properties
/usr/share/pki/kra/conf/workers.properties.minimal
/usr/share/pki/kra/conf/workers2.properties
/usr/share/pki/kra/conf/workers2.properties.minimal
/usr/share/pki/kra/setup
/usr/share/pki/kra/setup/registry_instance
/usr/share/pki/kra/webapps
/usr/share/pki/kra/webapps/ROOT
/usr/share/pki/kra/webapps/ROOT/WEB-INF
/usr/share/pki/kra/webapps/ROOT/WEB-INF/web.xml
/usr/share/pki/kra/webapps/ROOT/index.jsp
/usr/share/pki/kra/webapps/kra
/usr/share/pki/kra/webapps/kra/404.html
/usr/share/pki/kra/webapps/kra/500.html
/usr/share/pki/kra/webapps/kra/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/WEB-INF
/usr/share/pki/kra/webapps/kra/WEB-INF/lib
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cms.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cmsbundle.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cmscore.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cmsutil.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-nsutil.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/velocity.properties
/usr/share/pki/kra/webapps/kra/WEB-INF/web.xml
/usr/share/pki/kra/webapps/kra/admin
/usr/share/pki/kra/webapps/kra/admin/console
/usr/share/pki/kra/webapps/kra/agent
/usr/share/pki/kra/webapps/kra/agent/GenError.template
/usr/share/pki/kra/webapps/kra/agent/GenPending.template
/usr/share/pki/kra/webapps/kra/agent/GenRejected.template
/usr/share/pki/kra/webapps/kra/agent/GenSuccess.template
/usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template
/usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template
/usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/agent/cms-funcs.js
/usr/share/pki/kra/webapps/kra/agent/funcs.js
/usr/share/pki/kra/webapps/kra/agent/header.template
/usr/share/pki/kra/webapps/kra/agent/helpfun.js
/usr/share/pki/kra/webapps/kra/agent/index.jsp
/usr/share/pki/kra/webapps/kra/agent/index.template
/usr/share/pki/kra/webapps/kra/agent/kra
/usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html
/usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template
/usr/share/pki/kra/webapps/kra/agent/kra/getStats.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/index.jsp
/usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/monitor.template
/usr/share/pki/kra/webapps/kra/agent/kra/processReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/top.html
/usr/share/pki/kra/webapps/kra/index.jsp
/usr/share/pki/kra/webapps/kra/services.template


گزارش تغییرات

تاریخ آخرین تغییر جزئیات
2021-12-16

##########################################################################
# RHEL 7.9 (Batch Update 11):
##########################################################################
Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
7.9.0.z] (cfu)
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 7)

2021-10-23

##########################################################################
# RHEL 7.9 (Batch Update 10):
##########################################################################
Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
Bugzilla Bug 2016773 - Directory authentication plugin requires directory
7.9.z)
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 7)

2021-09-15

##########################################################################
# RHEL 7.9 (Batch Update 9):
##########################################################################
Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 7)

2021-08-09

##########################################################################
# RHEL 7.9 (Batch Update 8):
##########################################################################
Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
2xx response from CA REST API: 500 [ftweedale, ckelley]
##########################################################################
# RHCS 9.7 (Batch Update 8):
##########################################################################
Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile

2021-06-25

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
7.9.z] (cfu)
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 7)

2021-05-13

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
7.9.z] (cfu)
Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
7.9.z] (jmagne)
Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
7.9.z] (jmagne)
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 6)

2021-04-22

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
##########################################################################
# RHCS 9.7:
##########################################################################
Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
console to 10.5.18 in RHCS 9.7 (Batch Update 6)

2021-02-24

Change variable 'TPS' to 'tps'
##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
##########################################################################
# Backported CVEs (ascheel):
##########################################################################
Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
default]
Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
tps web Activity tab
default] (edewata, ascheel)
Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
default] (edewata, ascheel)
Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
7.9.z] (dmoluguw, ascheel)
Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
7.9.z]
Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
7.9.z] (ascheel)
Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
7.9.z] (ascheel,jmagne)
##########################################################################
Update to jquery v3.4.1 (ascheel)
Update to jquery-i18n-properties v1.2.7 (ascheel)
Update to backbone v1.4.0 (ascheel)
Upgrade to underscore v1.9.2 (ascheel)
Update to patternfly v3.59.3 (ascheel)
Update to jQuery v3.5.1 (ascheel)
Upgrade to bootstrap v3.4.1 (ascheel)
Link in new Bootstrap CSS file (ascheel)
##########################################################################
# RHCS 9.7:
##########################################################################
# Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and

2021-02-11

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
##########################################################################
# Backported CVEs (ascheel):
##########################################################################
Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
default]
Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
tps web Activity tab
default] (edewata, ascheel)
Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
default] (edewata, ascheel)
Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
7.9.z] (dmoluguw, ascheel)
Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
7.9.z]
Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
7.9.z] (ascheel)
Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
7.9.z] (ascheel,jmagne)
##########################################################################
Update to jquery v3.4.1 (ascheel)
Update to jquery-i18n-properties v1.2.7 (ascheel)
Update to backbone v1.4.0 (ascheel)
Upgrade to underscore v1.9.2 (ascheel)
Update to patternfly v3.59.3 (ascheel)
Update to jQuery v3.5.1 (ascheel)
Upgrade to bootstrap v3.4.1 (ascheel)
Link in new Bootstrap CSS file (ascheel)
##########################################################################
# RHCS 9.7:
##########################################################################
# Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and

2020-12-04

Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)

2020-12-03

Bugzilla Bug #1883639 - additional support on upgrade for audit

2020-11-17

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
##########################################################################
# RHCS 9.7:
##########################################################################
# Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
# Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
# Bugzilla Bug #1858861 - TPS - Server side key generation is not working
# Bugzilla Bug #1858867 - TPS does not check token cuid on the user

2020-05-27

Patch for CMCResponse tool
Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)

2020-05-19

Patch for CMC Credential Error, RSA PSS typo, and new profile
authentication-based Server-Side keygen
##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
##########################################################################
# RHCS 9.7:
##########################################################################
# Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and

2020-05-07

Updated jss dependencies
Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)

2020-05-05

##########################################################################
# RHEL 7.9:
##########################################################################
Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
up (cfu)
##########################################################################
# RHCS 9.7:
##########################################################################
# Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new