Red Hat CERTIFICATE 7.3 RELEASE NOTES Bedienungsanleitung PDF herunterladen

Red Hat Certificate

System 7.3

Release Notes

Updates for RHSA-2010:0602

The text of and illustrations in this document are licensed by Red Hat under a Creative

Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation

of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. In

accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you

must provide the URL for the original version.

Red Hat, as the licensor of this document, waives the right to enforce, and agrees not

to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law.

Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora,

the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United

States and other countries.

Linux® is the registered trademark of Linus Torvalds in the United States and other

countries.

Java® is a registered trademark of Oracle and/or its affiliates.

XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the

United States and/or other countries.

All other trademarks are the property of their respective owners.

1801 Varsity Drive

Raleigh, NC 27606-2072 USA

Phone: +1 919 754 3700

Phone: 888 733 4281

Fax: +1 919 754 3701

August 6, 2010 (update)

1. New Features in Red Hat Certificate System 7.3 ...................................................................... 2

1.1. Registration Authority ................................................................................................... 2

1.2. SCEP .......................................................................................................................... 3

1.3. Auto-enrollment Proxy .................................................................................................. 3

2. Platform Support ..................................................................................................................... 4

1 2 3 4 5 6 ... 23 24

Inhaltsverzeichnis

Seite 1 - System 7.3

Seite 2 - 1.1. Registration Authority

Release Notes10Bug DescriptionBug #321961 CVE-2007-5238 Vulnerabilities in Java Web Startallow to determine the location of the Java WebStart cacheBug

Seite 3 - 1.3. Auto-enrollment Proxy

Known Issues11NOTESeveral of these third-party packages may issue warnings when they are installedbecause they may contain the UID and GID of their or

Seite 4 - 2. Platform Support

Release Notes12• Web browsers, which are used by users to connect to the CA's end-entities pagesUpdating the system NSS packages on any system th

Seite 5 - 2.3. Other Required Software

Reconfiguring the Red Hat Certificate System Subsystems to Prevent a Potential TLS-Related Man-in-the-Middle Attack13 maxThreads="150"

Seite 6 - 3.1. Obtaining Packages

Release Notes14<Connector name="Agent" port="10443" maxHttpHeaderSize="8192" maxThreads="150" minSpa

Seite 7 - 3.3. Required JRE and JDK

Manually Adding a New Port to the RA15LD_PRELOAD="/usr/lib64/libssl3.so ${LD_PRELOAD}"On 32-bit systems, the path is /usr/lib/.4. Restart th

Seite 8 - Packages

Release Notes16This forces an user who wishes to renew a certificate to select the certificate to be renewed the firsttime they are asked to authentic

Seite 9

Viewing Enterprise Security Client Diagnostics Logs175. Restart the RA system.4.3. Viewing Enterprise Security Client Diagnostics LogsThe Enterprise S

Seite 10 - 3.6. Source RPMs

Release Notes18Bug Number Description Workaround229246 There is no separate SSL port for clients to authenticate to theRA.See Section 4.2, “ManuallyAd

Seite 11 - 4. Known Issues

Documentation19Bug Number Description Workaround237251 There is currently no option to add comments to a revocationrequest submitted through the RA. T

Seite 12 - IMPORTANT

Release Notes22.1. Server Support ... 42.2

Seite 13

Release Notes206. Copyright and Third-Party AcknowledgmentsCopyrights and third-party acknowledgments for portions of Red Hat Certificate System 7.3 s

Seite 14

Copyright and Third-Party Acknowledgments21Red Hat Certificate System includes a set of compiled binaries (from NSS 3.11) of several toolsfrom the Moz

Seite 15

Seite 16

Copyright and Third-Party Acknowledgments23shall Schlumberger or any Supplier be liable for any indirect, incidental, special consequential orexemplar

Seite 17 - 4.4. Other Known Issues

Release Notes24OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IFADVISED OF THE POSSIBILITY OF SUCH DAMAGE.7. Document HistoryR

Seite 18

SCEP3• RA Agent enrollmentThe RA also supports:• Status checks of Certificate Requests• Certificate retrieval• Email notification on Certificate Reque

Seite 19 - 5. Documentation

Release Notes4• Users and computers registered in a Windows® domain can automatically discover the location ofthe proxy on their network• Computers in

Seite 20

Client Support52.1.2. Red Hat Enterprise Linux ConsiderationsBefore installing the Certificate System packages, ensure that the proper dependencies ar

Seite 21 - https://rhn.redhat.com

Release Notes6IMPORTANTWith the updates from Errata RHSA-2010:0602, there is a conflict between thefortitude-mod_nss package installed with Red Hat Di

Seite 22

Installation Notes7NOTEThe source code for Red Hat Directory Server 7.1 is included with the ISO imagedownloaded for the 32-bit Red Hat Enterprise Lin

Seite 23

Release Notes8• java-1.5.0-ibm-1.5.0.11.1-1jpp.3.el4:1.x86_64.rpm (JRE)• java-1.5.0-ibm-devel-1.5.0.11.1-1jpp.3.el4:1.x86_64.rpm (JDK)WARNINGBoth the

Seite 24 - 7. Document History

Required JRE and JDK93.3.1.2. Installing the Required JRE and JDK on Red Hat Enterprise Linux 41. Download the java-1.5.0-ibm-1.5.0.11.1-1jpp.3.el4 an