pki-tools-10.5.12-1.fc27.i686.rpm


Advertisement

Description

pki-tools - Certificate System - PKI Tools

Property Value
Distribution Fedora 27
Repository Fedora Updates i386
Package name pki-tools
Package version 10.5.12
Package release 1.fc27
Package architecture i686
Package type rpm
Installed size 1008.23 KB
Download size 721.51 KB
Official Mirror download-ib01.fedoraproject.org
This package contains PKI executables that can be used to help make
Certificate System into a more complete and robust PKI solution.
This package is a part of the PKI Core used by the Certificate System.
==================================
||  ABOUT "CERTIFICATE SYSTEM"  ||
==================================
Certificate System (CS) is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.
PKI Core contains ALL top-level java-based Tomcat PKI components:
* pki-symkey
* pki-base
* pki-base-python2 (alias for pki-base)
* pki-base-python3
* pki-base-java
* pki-tools
* pki-server
* pki-ca
* pki-kra
* pki-ocsp
* pki-tks
* pki-tps
* pki-javadoc
which comprise the following corresponding PKI subsystems:
* Certificate Authority (CA)
* Key Recovery Authority (KRA)
* Online Certificate Status Protocol (OCSP) Manager
* Token Key Service (TKS)
* Token Processing Service (TPS)
Python clients need only install the pki-base package.  This
package contains the python REST client packages and the client
upgrade framework.
Java clients should install the pki-base-java package.  This package
contains the legacy and REST Java client packages.  These clients
should also consider installing the pki-tools package, which contain
native and Java-based PKI tools and utilities.
Certificate Server instances require the fundamental classes and
modules in pki-base and pki-base-java, as well as the utilities in
pki-tools.  The main server classes are in pki-server, with subsystem
specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc.
Finally, if Certificate System is being deployed as an individual or
set of standalone rather than embedded server(s)/service(s), it is
strongly recommended (though not explicitly required) to include at
least one PKI Theme package:
* dogtag-pki-theme (Dogtag Certificate System deployments)
* dogtag-pki-server-theme
* redhat-pki-server-theme (Red Hat Certificate System deployments)
* redhat-pki-server-theme
* customized pki theme (Customized Certificate System deployments)
* <customized>-pki-server-theme
NOTE:  As a convenience for standalone deployments, top-level meta
packages may be provided which bind a particular theme to
these certificate server packages.

Alternatives

Package Version Architecture Repository
pki-tools-10.5.12-1.fc27.x86_64.rpm 10.5.12 x86_64 Fedora Updates
pki-tools-10.4.8-5.fc27.x86_64.rpm 10.4.8 x86_64 Fedora
pki-tools-10.4.8-5.fc27.i686.rpm 10.4.8 i686 Fedora
pki-tools - - -

Requires

Name Value
java-1.8.0-openjdk-headless -
jpackage-utils >= 1.7.5-10
libc.so.6(GLIBC_2.4) -
liblber-2.4.so.2 -
libldap-2.4.so.2 -
libnspr4.so -
libnss3.so -
libnss3.so(NSS_3.10) -
libnss3.so(NSS_3.10.2) -
libnss3.so(NSS_3.2) -
libnss3.so(NSS_3.3) -
libnss3.so(NSS_3.4) -
libnss3.so(NSS_3.5) -
libnss3.so(NSS_3.6) -
libnss3.so(NSS_3.7) -
libnss3.so(NSS_3.9) -
libnssutil3.so -
libplc4.so -
libplds4.so -
libsmime3.so -
libsmime3.so(NSS_3.2) -
libsmime3.so(NSS_3.4) -
libssl3.so -
libssl3.so(NSS_3.12.6) -
libssl3.so(NSS_3.14) -
libssl3.so(NSS_3.2) -
libssl3.so(NSS_3.4) -
nss-tools >= 3.28.3
openldap-clients -
pki-base = 10.5.12-1.fc27
pki-base-java = 10.5.12-1.fc27
rtld(GNU_HASH) -
tomcat-servlet-3.1-api -

Provides

Name Value
pki-java-tools = 10.5.12-1.fc27
pki-native-tools = 10.5.12-1.fc27
pki-tools = 10.5.12-1.fc27
pki-tools(x86-32) = 10.5.12-1.fc27

Obsoletes

Name Value
pki-java-tools < 10.5.12-1.fc27
pki-native-tools < 10.5.12-1.fc27

Download

Type URL
Binary Package pki-tools-10.5.12-1.fc27.i686.rpm
Source Package pki-core-10.5.12-1.fc27.src.rpm

Install Howto

Install pki-tools rpm package:

# dnf install pki-tools

Files

Path
/usr/bin/AtoB
/usr/bin/AuditVerify
/usr/bin/BtoA
/usr/bin/CMCEnroll
/usr/bin/CMCRequest
/usr/bin/CMCResponse
/usr/bin/CMCRevoke
/usr/bin/CMCSharedToken
/usr/bin/CRMFPopClient
/usr/bin/DRMTool
/usr/bin/ExtJoiner
/usr/bin/GenExtKeyUsage
/usr/bin/GenIssuerAltNameExt
/usr/bin/GenSubjectAltNameExt
/usr/bin/HttpClient
/usr/bin/KRATool
/usr/bin/OCSPClient
/usr/bin/PKCS10Client
/usr/bin/PKCS12Export
/usr/bin/PrettyPrintCert
/usr/bin/PrettyPrintCrl
/usr/bin/TokenInfo
/usr/bin/p7tool
/usr/bin/pki
/usr/bin/revoker
/usr/bin/setpin
/usr/bin/sslget
/usr/bin/tkstool
/usr/lib/.build-id/
/usr/lib/.build-id/7a/478e2b6d0df1b814f6f86e9641eb74783a13e9
/usr/lib/.build-id/88/44e63b96bfbfba9fc55ddd8c07b82d6a942368
/usr/lib/.build-id/dd/7fd6094ca51b53f56f88565f96ac55f2655842
/usr/lib/.build-id/e4/3efd31ca7e6247d948eabb367fcf151492e977
/usr/lib/.build-id/ed/7065c690ce2886021ab56620d81e24b02edb2c
/usr/share/doc/pki-tools/LICENSE
/usr/share/doc/pki-tools/README
/usr/share/java/pki/pki-tools.jar
/usr/share/man/man1/AtoB.1.gz
/usr/share/man/man1/AuditVerify.1.gz
/usr/share/man/man1/BtoA.1.gz
/usr/share/man/man1/CMCEnroll.1.gz
/usr/share/man/man1/CMCRequest.1.gz
/usr/share/man/man1/CMCResponse.1.gz
/usr/share/man/man1/CMCSharedToken.1.gz
/usr/share/man/man1/DRMTool.1.gz
/usr/share/man/man1/KRATool.1.gz
/usr/share/man/man1/PKCS10Client.1.gz
/usr/share/man/man1/PrettyPrintCert.1.gz
/usr/share/man/man1/PrettyPrintCrl.1.gz
/usr/share/man/man1/pki-audit.1.gz
/usr/share/man/man1/pki-ca-kraconnector.1.gz
/usr/share/man/man1/pki-ca-profile.1.gz
/usr/share/man/man1/pki-cert.1.gz
/usr/share/man/man1/pki-client.1.gz
/usr/share/man/man1/pki-group-member.1.gz
/usr/share/man/man1/pki-group.1.gz
/usr/share/man/man1/pki-key.1.gz
/usr/share/man/man1/pki-pkcs12-cert.1.gz
/usr/share/man/man1/pki-pkcs12-key.1.gz
/usr/share/man/man1/pki-pkcs12.1.gz
/usr/share/man/man1/pki-securitydomain.1.gz
/usr/share/man/man1/pki-tps-profile.1.gz
/usr/share/man/man1/pki-user-cert.1.gz
/usr/share/man/man1/pki-user-membership.1.gz
/usr/share/man/man1/pki-user.1.gz
/usr/share/man/man1/pki.1.gz
/usr/share/pki/java-tools/DRMTool.cfg
/usr/share/pki/java-tools/KRATool.cfg
/usr/share/pki/native-tools/setpin.conf

Changelog

2018-08-13 - Dogtag Team <pki-devel@redhat.com> 10.5.12-1
- dogtagpki Pagure Issue #2481 - ECC keys not supported for signing
audit logs (cfu)
- dogtagpki Pagure Issue #3041 -Enable all config audit events (cfu)
- dogtagpki Pagure Issue #3043 - consumer initialization failed.
Error (0) Total update succeeded (abokovoy)
- Fixed pki console configurations that involves ldap passwords leave the
plain text password in signed audit logs (cfu)
- Fixed Certificate generation happens with partial attributes in CMCRequest
file (cfu)
- Fixed Better understanding of NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Fixed CMC Revocations throws exception with same reqIssuer & certissuer (cfu)
2018-08-09 - Dogtag Team <pki-devel@redhat.com> 10.5.11-2
- freeipa Pagure Issue #7627 - ipa-replica-install --setup-kra broken
on DL0 with latest version (abokovoy)
2018-07-31 - Dogtag Team <pki-devel@redhat.com> 10.5.11-1
- dogtagpki Pagure Issue #2915 - keyGen fails when only Identity
certificate exists (jmagne)
2018-07-02 - Dogtag Team <pki-devel@redhat.com> 10.5.10-1
- Updated "jss" build and runtime requirements (mharmsen)
- Updated "tomcatjss" build and runtime requirements (mharmsen)
- dogtagpki Pagure Issue #2865 X500Name.directoryStringEncodingOrder
overridden by CSR encoding (cfu)
- dogtagpki Pagure Issue #2920 Part2 of SharedToken Audit (cfu)
- dogtagpki Pagure Issue #2922 IPAddressName: fix construction from
String (ftweedal)
- dogtagpki Pagure Issue #2959 Address pkispawn ECC profile overrides (cfu)
- dogtagpki Pagure Issue #2992 CMC Simple request profiles and CMCResponse
to support simple response (cfu)
- dogtagpki Pagure Issue #3003 AuditVerify failure due to line breaks (cfu)
- dogtagpki Pagure Issue #3037 CMC SharedToken SubjectDN default (cfu)
2018-06-08 - Dogtag Team <pki-devel@redhat.com> 10.5.9-1
- dogtagpki Pagure Issue #2922 - Name Constraints: Using a Netmask
produces an odd entry in a certifcate (ftweedal)
- dogtagpki Pagure Issue #2941 - ExternalCA: Installation failed during
csr generation with ecc (rrelyea, gkapoor)
- dogtagpki Pagure Issue #2999 - Cert validation for installation with
external CA cert (edewata)
- dogtagpki Pagure Issue #3028 - CMC CRMF request results in
InvalidKeyFormatException when signing algorithm is ECC (cfu)
- dogtagpki Pagure Issue #3033 - CRMFPopClient tool - should allow
option to do no key archival (cfu)
2018-05-23 - Dogtag Team <pki-devel@redhat.com> 10.5.8-1
- Updated "jss" build and runtime requirements (mharmsen)
- dogtagpki Pagure Issue #1576 - subsystem -> subsystem SSL handshake
issue with TLS_ECDHE_RSA_* on Thales HSM (cfu)
- dogtagpki Pagure Issue #1741 - ECDSA Certificates Generated by
Certificate System fail NIST validation test with parameter field. (cfu)
- dogtagpki Pagure Issue #2940 - [MAN] Missing Man pages for tools
CMCRequest, CMCResponse, CMCSharedToken (cfu)
- dogtagpki Pagure Issue #2992 - servlet profileSubmitCMCSimple throws
NPE (cfu)
- dogtagpki Pagure Issue #2995 - SAN in internal SSL server certificate in
pkispawn configuration step (cfu)
- dogtagpki Pagure Issue #2996 - ECC installation for non CA subsystems
needs improvement (jmagne)
- dogtagpki Pagure Issue #2997 - Token name normalization problem in
pki-server subsystem-cert-validate (edewata)
- dogtagpki Pagure Issue #3018 - CMC profiles: Some CMC profiles have
wrong input class_id (cfu)
2018-04-10 - Dogtag Team <pki-devel@redhat.com> 10.5.7-2
- dogtagpki Pagure Issue #2940 -[MAN] Missing Man pages for tools
CMCRequest, CMCResponse, CMCSharedToken (cfu)
- dogtagpki Pagure Issue #2946 - libtps does not directly depend on libz
(build failure with nss-3.35) (ftweedal, cfu)
- dogtagpki Pagure Issue #2950 - Need ECC-specific Enrollment Profiles
for standard conformance (cfu)

See Also

Package Description
pki-tps-10.5.12-1.fc27.i686.rpm Certificate System - Token Processing Service
pl-7.4.2-4.fc27.i686.rpm SWI-Prolog - Edinburgh compatible Prolog compiler
pl-compat-yap-devel-7.4.2-4.fc27.i686.rpm Development files building YAP application against SWI Prolog
pl-devel-7.4.2-4.fc27.i686.rpm Development files for SWI Prolog
pl-doc-7.4.2-4.fc27.i686.rpm Documentation for SWI Prolog
pl-jpl-7.4.2-4.fc27.i686.rpm A bidirectional Prolog/Java interface for SWI Prolog
pl-odbc-7.4.2-4.fc27.i686.rpm SWI-Prolog ODBC interface
pl-static-7.4.2-4.fc27.i686.rpm Static library for SWI Prolog
pl-xpce-7.4.2-4.fc27.i686.rpm A toolkit for developing graphical applications in Prolog
plasma-breeze-5.12.7-1.fc27.i686.rpm Artwork, styles and assets for the Breeze visual style for the Plasma Desktop
plasma-breeze-common-5.12.7-1.fc27.noarch.rpm Common files shared between KDE 4 and Plasma 5 versions of the Breeze style
plasma-desktop-5.12.7-1.fc27.i686.rpm Plasma Desktop shell
plasma-desktop-doc-5.12.7-1.fc27.noarch.rpm Documentation and user manuals for plasma-desktop
plasma-desktop-kimpanel-scim-5.12.7-1.fc27.i686.rpm SCIM backend for kimpanel
plasma-discover-5.12.7-1.fc27.i686.rpm KDE and Plasma resources management GUI
Advertisement
Advertisement