FEDORA-EPEL-2010-2276 — enhancement update for myproxy

stable

FEDORA-EPEL-2010-2276 created by stevetraylen 14 years ago for Fedora EPEL 5

in myproxy-server, atomically update credential files and avoid unnecessary file copies; NOTE API CHANGE: myproxy_creds_store() now moves file to the repository, rather than copying it
add myproxy-server.config request_size_limit parameter to control myproxy-server network limits, and fix network limit handling to apply only to myproxy-server (not clients), so clients can handle large X509_CERT_DIR contents (http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6889)
include extendedKeyUsage=clientAuth in EECs by default per GFD.125
add myproxy-logon/myproxy-get-trustroots -b option to allow bootstrapping CA trust even when X509_CERT_DIR exists (http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6886)
myproxy-logon -T / myproxy-get-trustroots fixes/improvements:
when cleaning bad CRLs, also remove any CRLs we can't parse
when recovering from CRL errors, allow anonymous authentication on second attempt, just like first attempt
when bootstrapping, restrict CA trust to only the one certificate subject needed, rather than a wildcard

This update has been submitted for testing

This update has been pushed to testing

This update has been submitted for stable.

This update has been pushed to stable

Please login to add feedback.

Metadata

Type

enhancement

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

14 years ago

in testing

14 years ago

in stable

14 years ago

Builds

None