dogtag-pki 11.0.6-1 source package in Ubuntu

Changelog

dogtag-pki (11.0.6-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2022-2414 (Closes: #1014957)
  * control: Fix pki-base-java to depend on default-jre-headless instead
    of a versioned one, it shouldn't be necessary to hardcode it
    anymore. (Closes: #1024462)
  * control: Bump dependency on jss, ldapjdk, tomcatjss.
  * dont-use-deprecated-python-ldap-options.diff: Drop constants removed
    in python-ldap 3.4.
  * rules: Bump JAVA_HOME to match java 17.

 -- Timo Aaltonen <email address hidden>  Thu, 12 Jan 2023 20:49:28 +0200

Upload details

Uploaded by:
Debian FreeIPA Team
Uploaded to:
Sid
Original maintainer:
Debian FreeIPA Team
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
dogtag-pki_11.0.6-1.dsc 3.7 KiB a0de1237c7f74431209cdbffb5f90d5cb21353e51c8f72d3f705c636af35f1c5
dogtag-pki_11.0.6.orig.tar.xz 6.5 MiB d1dad801fcd20d91a2914af55fcdd9e6665ff679812ad0bf76109dca9588da7d
dogtag-pki_11.0.6-1.debian.tar.xz 42.4 KiB ecee6888299af32b9826cb66936d719c7bb2c80171609c91e0045294a4e246e5

No changes file available.

Binary packages built by this source

dogtag-pki: Dogtag Public Key Infrastructure (PKI) Suite

 The Dogtag Public Key Infrastructure (PKI) Suite is comprised of the following
 five subsystems and a client (for use by a Token Management System):
 .
   * Certificate Authority (CA)
   * Data Recovery Manager (DRM)
   * Online Certificate Status Protocol (OCSP) Manager
   * Token Key Service (TKS)
   * Token Processing System (TPS)
   * Enterprise Security Client (ESC)
 .
 Additionally, it provides a console GUI application used for server and
 user/group administration of CA, DRM, OCSP, and TKS, javadocs on portions
 of the Dogtag API, as well as various command-line tools used to assist with
 a PKI deployment.
 .
 This metapackage installs every PKI subsystem.

dogtag-pki-console-theme: Certificate System - PKI Console User Interface

 This PKI Console User Interface contains the Dogtag textual
 and graphical user interface for the PKI Console.
 .
 This package is used by the Dogtag Certificate System.

dogtag-pki-server-theme: Certificate System - PKI Server User Interface

 This PKI Common Framework User Interface contains the Dogtag
 textual and graphical user interface for the PKI Common Framework.
 .
 This package is used by the Dogtag Certificate System.

libsymkey-java: No summary available for libsymkey-java in ubuntu lunar.

No description available for libsymkey-java in ubuntu lunar.

libsymkey-jni: No summary available for libsymkey-jni in ubuntu lunar.

No description available for libsymkey-jni in ubuntu lunar.

libsymkey-jni-dbgsym: No summary available for libsymkey-jni-dbgsym in ubuntu lunar.

No description available for libsymkey-jni-dbgsym in ubuntu lunar.

pki-base: Certificate System - PKI Framework

 The PKI Framework contains the common and client libraries and utilities.
 .
 This package is a part of the PKI Core used by the Certificate System.

pki-base-java: Certificate System - PKI Framework -- java client support

 The PKI Framework contains the common and client libraries and utilities.
 .
 This package is a part of the PKI Core used by the Certificate System.

pki-ca: Certificate System - Certificate Authority

 The Certificate Authority (CA) is a required PKI subsystem which issues,
 renews, revokes, and publishes certificates as well as compiling and
 publishing Certificate Revocation Lists (CRLs).
 .
 The Certificate Authority can be configured as a self-signing Certificate
 Authority, where it is the root CA, or it can act as a subordinate CA,
 where it obtains its own signing certificate from a public CA.
 .
 This package is a part of the PKI Core used by the Certificate System.

pki-console: Certificate System - PKI Console

 Certificate System (CS) is an enterprise software system designed
 to manage enterprise Public Key Infrastructure (PKI) deployments.
 .
 The PKI Console is a java application used to administer CS.

pki-javadoc: Certificate System - PKI Framework Javadocs

 This documentation pertains exclusively to version 10 of
 the PKI Framework and Tools.
 .
 This package is a part of the PKI Core used by the Certificate System.

pki-kra: Certificate System - Data Recovery Manager

 Certificate System (CS) is an enterprise software system designed
 to manage enterprise Public Key Infrastructure (PKI) deployments.
 .
 The Data Recovery Manager (DRM) is an optional PKI subsystem that can act
 as a Key Recovery Authority (KRA). When configured in conjunction with the
 Certificate Authority (CA), the DRM stores private encryption keys as part of
 the certificate enrollment process. The key archival mechanism is triggered
 when a user enrolls in the PKI and creates the certificate request. Using the
 Certificate Request Message Format (CRMF) request format, a request is
 generated for the user's private encryption key. This key is then stored in
 the DRM which is configured to store keys in an encrypted format that can only
 be decrypted by several agents requesting the key at one time, providing for
 protection of the public encryption keys for the users in the PKI deployment.
 .
 Note that the DRM archives encryption keys; it does NOT archive signing keys,
 since such archival would undermine non-repudiation properties of signing keys.

pki-ocsp: Certificate System - Online Certificate Status Protocol Manager

 Certificate System (CS) is an enterprise software system designed
 to manage enterprise Public Key Infrastructure (PKI) deployments.
 .
 The Online Certificate Status Protocol (OCSP) Manager is an optional PKI
 subsystem that can act as a stand-alone OCSP service. The OCSP Manager
 performs the task of an online certificate validation authority by enabling
 OCSP-compliant clients to do real-time verification of certificates. Note
 that an online certificate-validation authority is often referred to as an
 OCSP Responder.
 .
 Although the Certificate Authority (CA) is already configured with an
 internal OCSP service. An external OCSP Responder is offered as a separate
 subsystem in case the user wants the OCSP service provided outside of a
 firewall while the CA resides inside of a firewall, or to take the load of
 requests off of the CA.
 .
 The OCSP Manager can receive Certificate Revocation Lists (CRLs) from
 multiple CA servers, and clients can query the OCSP Manager for the
 revocation status of certificates issued by all of these CA servers.
 .
 When an instance of OCSP Manager is set up with an instance of CA, and
 publishing is set up to this OCSP Manager, CRLs are published to it
 whenever they are issued or updated.

pki-server: Certificate System - PKI Server Framework

 The PKI Server Framework is required by the following four PKI subsystems:
 .
     the Certificate Authority (CA),
     the Data Recovery Manager (DRM),
     the Online Certificate Status Protocol (OCSP) Manager, and
     the Token Key Service (TKS).
 .
 This package is a part of the PKI Core used by the Certificate System.
 The package contains scripts to create and remove PKI subsystems.

pki-tks: Certificate System - Token Key Service

 Certificate System (CS) is an enterprise software system designed
 to manage enterprise Public Key Infrastructure (PKI) deployments.
 .
 The Token Key Service (TKS) is an optional PKI subsystem that manages the
 master key(s) and the transport key(s) required to generate and distribute
 keys for hardware tokens. TKS provides the security between tokens and an
 instance of Token Processing System (TPS), where the security relies upon the
 relationship between the master key and the token keys. A TPS communicates
 with a TKS over SSL using client authentication.
 .
 TKS helps establish a secure channel (signed and encrypted) between the token
 and the TPS, provides proof of presence of the security token during
 enrollment, and supports key changeover when the master key changes on the
 TKS. Tokens with older keys will get new token keys.
 .
 Because of the sensitivity of the data that TKS manages, TKS should be set up
 behind the firewall with restricted access.

pki-tools: Certificate System - PKI Tools

 This package contains PKI executables that can be used to help make
 Certificate System into a more complete and robust PKI solution.
 .
 This package is a part of the PKI Core used by the Certificate System.

pki-tools-dbgsym: debug symbols for pki-tools
pki-tps: Certificate System - Token Processing System

 Certificate System (CS) is an enterprise software system designed
 to manage enterprise Public Key Infrastructure (PKI) deployments.
 .
 The Token Processing System (TPS) is an optional PKI subsystem that acts
 as a Registration Authority (RA) for authenticating and processing
 enrollment requests, PIN reset requests, and formatting requests from
 the Enterprise Security Client (ESC).
 .
 TPS is designed to communicate with tokens that conform to
 Global Platform's Open Platform Specification.
 .
 TPS communicates over SSL with various PKI backend subsystems (including
 the Certificate Authority (CA), the Data Recovery Manager (DRM), and the
 Token Key Service (TKS)) to fulfill the user's requests.
 .
 TPS also interacts with the token database, an LDAP server that stores
 information about individual tokens.

pki-tps-client: No summary available for pki-tps-client in ubuntu lunar.

No description available for pki-tps-client in ubuntu lunar.

pki-tps-client-dbgsym: No summary available for pki-tps-client-dbgsym in ubuntu lunar.

No description available for pki-tps-client-dbgsym in ubuntu lunar.

python3-pki-base: Certificate System - PKI Framework -- python3 client support

 The PKI Framework contains the common and client libraries and utilities.
 .
 This package is a part of the PKI Core used by the Certificate System.