Synopsis

certmonger bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated certmonger package is now available for Red Hat Enterprise Linux 6.

Description

The certmonger service monitors certificates, warning of their impending
expiration, and optionally attempting to re-enroll with supported CAs
(Certificate Authorities).

This update fixes the following bug:

• When submitting a signing request to a Red Hat IPA (Identity, Policy, Audit)
  CA, certmonger is expected to authenticate using the client's host credentials,
  and to delegate the client's credentials to the server. Recent updates to
  libraries on which certmonger depends changed delegation of client credentials
  from a mandatory operation to an optional operation that is no longer enabled by
  default, which effectively broke certmonger's support for IPA CAs.
  

This update gives certmonger the ability to explicitly request credential
delegation when used with newer versions of these libraries, which introduce an
API that allows certmonger to explicitly request that credential delegation be
performed. (BZ#729803)

All certmonger users should upgrade to this updated package, which fixes this
bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 729803 - Add support for new xmlrpc-c API to do GSSAPI delegation

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
x86_64
certmonger-0.42-1.el5_7.1.x86_64.rpm	SHA-256: e78d3badea62b04cd88001274a2374cd6dc88e37c692257ae5afee8719ed8c1e
ia64
certmonger-0.42-1.el5_7.1.ia64.rpm	SHA-256: c23cfcd3558046d09325cb9382411c17017241441a02b7ebd3364d47834fd0bb
i386
certmonger-0.42-1.el5_7.1.i386.rpm	SHA-256: 09cf02efa6eef89bb88e48d04f3fb2fd3cda7f888ee6d4472a9571befaaf54a5

Red Hat Enterprise Linux Workstation 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
x86_64
certmonger-0.42-1.el5_7.1.x86_64.rpm	SHA-256: e78d3badea62b04cd88001274a2374cd6dc88e37c692257ae5afee8719ed8c1e
i386
certmonger-0.42-1.el5_7.1.i386.rpm	SHA-256: 09cf02efa6eef89bb88e48d04f3fb2fd3cda7f888ee6d4472a9571befaaf54a5

Red Hat Enterprise Linux Desktop 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
x86_64
certmonger-0.42-1.el5_7.1.x86_64.rpm	SHA-256: e78d3badea62b04cd88001274a2374cd6dc88e37c692257ae5afee8719ed8c1e
i386
certmonger-0.42-1.el5_7.1.i386.rpm	SHA-256: 09cf02efa6eef89bb88e48d04f3fb2fd3cda7f888ee6d4472a9571befaaf54a5

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
s390x
certmonger-0.42-1.el5_7.1.s390x.rpm	SHA-256: 99643c879efad322a453c9235ff3332ecaf4c185f16abf68c71b259b019483aa

Red Hat Enterprise Linux for Power, big endian 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
ppc
certmonger-0.42-1.el5_7.1.ppc.rpm	SHA-256: 741d06d529cb9d7d9be73f6921916f6648af2f759098e1e9552d42e5c96476dc

Red Hat Enterprise Linux Server from RHUI 5

SRPM
certmonger-0.42-1.el5_7.1.src.rpm	SHA-256: 63658a0d6051da8de5c9f494a571117de0cbfb774f15604de6f823af9718777a
x86_64
certmonger-0.42-1.el5_7.1.x86_64.rpm	SHA-256: e78d3badea62b04cd88001274a2374cd6dc88e37c692257ae5afee8719ed8c1e
i386
certmonger-0.42-1.el5_7.1.i386.rpm	SHA-256: 09cf02efa6eef89bb88e48d04f3fb2fd3cda7f888ee6d4472a9571befaaf54a5