Package idm-pki-kra-11.7.0-2.el10.noarch
| Name | idm-pki-kra |
|---|---|
| Epoch | 0 |
| Version | 11.7.0 |
| Release | 2.el10 |
| Architecture | noarch |
| Website/URL | https://www.dogtagpki.org |
| License | GPL-2.0-only AND LGPL-2.0-only |
| Build Time | 2025-10-24 22:34:22 |
| Build Host | builder-x86-04.inferitos.ru |
| Summary | IdM PKI KRA Package |
| Repositories | AppStream |
| Description | IdM PKI Key Recovery Authority (KRA) is an optional subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user's private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys. |
| Errata | — |
| Size | 367 KiB |
| Source Project | dogtag-pki-11.7.0-2.el10 |
| SHA-256 checksum | 25bdbcfe0df3cf9382a0103043a5d629f1d653009ae3c4831b8a6be3b0443f4c |
×
![Full screenshot]()
* Wed Aug 06 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.7.0-2 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 * Sun Feb 16 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 * Wed Feb 05 2025 Joe Orton <jorton@redhat.com> - 11.6.0-0.3.alpha2 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS * Mon Dec 09 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-alpha2 - Rebase to PKI 11.6.0-alpha2 * Tue Nov 26 2024 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 11.5.4-3 - Rebuilt for MSVSphere 10 * Thu Aug 22 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.4-3 - Fix JAXB library filename * Fri Aug 16 2024 Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2 - Rebuilt with java-21-openjdk as default JDK: https://issues.redhat.com/browse/RHEL-34597 - Resolves: RHEL-54649 * Thu Aug 08 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.4-1 - Rebase to PKI 11.5.4 - Bundle Jakarta libraries * Tue Jul 16 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.3-1 - Rebase to PKI 11.5.3 - Bundle RESTEasy and Jackson libraries * Wed Jul 03 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1 - Rebase to PKI 11.5.2 - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability