Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Products & Services

    Products

    Support

    • Production Support
    • Development Support
    • Product Life Cycles

    Services

    • Consulting
    • Technical Account Management
    • Training & Certifications

    Documentation

    • Red Hat Enterprise Linux
    • Red Hat JBoss Enterprise Application Platform
    • Red Hat OpenStack Platform
    • Red Hat OpenShift Container Platform
    All Documentation

    Ecosystem Catalog

    • Red Hat Partner Ecosystem
    • Partner Resources
  • Tools

    Tools

    • Troubleshoot a product issue
    • Packages
    • Errata

    Customer Portal Labs

    • Configuration
    • Deployment
    • Security
    • Troubleshoot
    All labs

    Red Hat Insights

    Increase visibility into IT operations to detect and resolve technical issues before they impact your business.

    Learn More
    Go to Insights
  • Security

    Red Hat Product Security Center

    Engage with our Red Hat Product Security team, access security updates, and ensure your environments are not exposed to any known security vulnerabilities.

    Product Security Center

    Security Updates

    • Security Advisories
    • Red Hat CVE Database
    • Security Labs

    Keep your systems secure with Red Hat's specialized responses to security vulnerabilities.

    View Responses

    Resources

    • Security Blog
    • Security Measurement
    • Severity Ratings
    • Backporting Policies
    • Product Signing (GPG) Keys
  • Community

    Customer Portal Community

    • Discussions
    • Private Groups
    Community Activity

    Customer Events

    • Red Hat Convergence
    • Red Hat Summit

    Stories

    • Red Hat Subscription Value
    • You Asked. We Acted.
    • Open Source Communities
Or troubleshoot an issue.

Select Your Language

  • English
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Virtualization
  • Red Hat Identity Management
  • Red Hat Directory Server
  • Red Hat Certificate System
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Update Infrastructure
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat CloudForms
  • Red Hat OpenStack Platform
  • Red Hat OpenShift Container Platform
  • Red Hat OpenShift Data Science
  • Red Hat OpenShift Online
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat CodeReady Workspaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat Single Sign On
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Thorntail
  • Red Hat build of Eclipse Vert.x
  • Red Hat build of OpenJDK
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Integration
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
  • Red Hat JBoss Data Virtualization
  • Red Hat Process Automation
  • Red Hat Process Automation Manager
  • Red Hat Decision Manager
All Products
Red Hat Product Errata RHBA-2015:1379 - Bug Fix Advisory
Issued:
2015-07-22
Updated:
2015-07-22

RHBA-2015:1379 - Bug Fix Advisory

  • Overview
  • Updated Packages

Synopsis

certmonger bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated certmonger packages that fix two bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

The certmonger service monitors certificates, warns of their impending
expiration, and optionally attempts to renew certificates by enrolling the
system with a certificate authority (CA).

This update fixes the following bugs:

  • Prior to this update, after the user upgraded from Red Hat Enterprise Linux

6.5 to Red Hat Enterprise Linux 6.6 and rebooted the system, certmonger in some
cases erroneously exited shortly after starting or performed a series of
unnecessary checks for new certificates. A patch has been applied to fix this
bug, and these problems no longer occur in the described situation. (BZ#1163023)

  • Previously, the "getcert list" command did not display the "pre-save command"

and "post-save command" values. As a consequence, running "getcert list" could
return incomplete results. With this update, the problem has been fixed, and
running "getcert list" displays the "pre-save command" and "post-save command"
values as expected. (BZ#1178190)

In addition, this update adds the following enhancements:

  • The certmonger service now supports the Simple Certificate Enrollment Protocol

(SCEP). For obtaining certificates from servers, the user can now offer
enrollment over SCEP. (BZ#1161768)

  • Requesting a certificate using the getcert utility during an IdM client

kickstart enrollment no longer requires certmonger to be running. Previously, an
attempt to do this failed because certmonger was not running. With this update,
getcert can successfully request a certificate in the described situation, on
the condition that the D-Bus daemon is not running. Note that certmonger
requires a system reboot to start monitoring the certificate obtained in this
way. (BZ#1169806)

  • Previously, after the user ran the "getcert list" command, the output included

the PIN value if it was set for the certificate. Consequently, the user could
unintentionally expose the PIN, for example by publicly sharing the output of
the command. With this update, the "getcert list" output only contains a note
that a PIN is set for the certificate. As a result, the PIN value itself is no
longer displayed in the "getcert list" output. (BZ#1222595)

Users of certmonger are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1144082 - rebuild tests of tps-srpmtest test failing
  • BZ - 1161768 - [RFE] certmonger: add support for scep for certificates auto enrollment
  • BZ - 1163023 - certmonger 32 bits crashes after upgrading from 6.5 to 6.6
  • BZ - 1178190 - pre and post commands do not display in getcert list
  • BZ - 1219643 - certmonger 0.77.1/0.77.2 can lose private keys
  • BZ - 1222595 - Suppress PIN values in 'getcert list' output

CVEs

(none)

References

(none)

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415
i386
certmonger-0.77.5-1.el6.i686.rpm SHA-256: eef46218a02ce726b9f7aa6d25313e662b9dd09ed6aa5368d5c213e0523f0706
certmonger-debuginfo-0.77.5-1.el6.i686.rpm SHA-256: 85426d316db67781faf03a975f100e11c6810b97c2600e2f4c6832e6a669716e

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415
i386
certmonger-0.77.5-1.el6.i686.rpm SHA-256: eef46218a02ce726b9f7aa6d25313e662b9dd09ed6aa5368d5c213e0523f0706
certmonger-debuginfo-0.77.5-1.el6.i686.rpm SHA-256: 85426d316db67781faf03a975f100e11c6810b97c2600e2f4c6832e6a669716e

Red Hat Enterprise Linux Workstation 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415
i386
certmonger-0.77.5-1.el6.i686.rpm SHA-256: eef46218a02ce726b9f7aa6d25313e662b9dd09ed6aa5368d5c213e0523f0706
certmonger-debuginfo-0.77.5-1.el6.i686.rpm SHA-256: 85426d316db67781faf03a975f100e11c6810b97c2600e2f4c6832e6a669716e

Red Hat Enterprise Linux Desktop 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415
i386
certmonger-0.77.5-1.el6.i686.rpm SHA-256: eef46218a02ce726b9f7aa6d25313e662b9dd09ed6aa5368d5c213e0523f0706
certmonger-debuginfo-0.77.5-1.el6.i686.rpm SHA-256: 85426d316db67781faf03a975f100e11c6810b97c2600e2f4c6832e6a669716e

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
s390x
certmonger-0.77.5-1.el6.s390x.rpm SHA-256: 169e1071c955ebd917de2297f24e6c1326d06e19f064a826ecefcdb3e406eb56
certmonger-debuginfo-0.77.5-1.el6.s390x.rpm SHA-256: 8406f0753077e43aa7e381bd79a1276ab858262f82813d848ace73748e759821

Red Hat Enterprise Linux for Power, big endian 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
ppc64
certmonger-0.77.5-1.el6.ppc64.rpm SHA-256: ff46e504b528d9ee84537b27f48c109f936ddfd6579d1beaf1b9a927e22460d8
certmonger-debuginfo-0.77.5-1.el6.ppc64.rpm SHA-256: 6b15617f91d5ada09c6470b0974529eb54f605761c3cffa8220590f93b857916

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415

Red Hat Enterprise Linux Server from RHUI 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
x86_64
certmonger-0.77.5-1.el6.x86_64.rpm SHA-256: ed68be48b9948713982ab99bf2aecc84875a466e710d63598bd3ff552356c045
certmonger-debuginfo-0.77.5-1.el6.x86_64.rpm SHA-256: 9f2e1916a6e0a9d3668d67d67cf60544704bc651f70383c08055cb5e14c4e415
i386
certmonger-0.77.5-1.el6.i686.rpm SHA-256: eef46218a02ce726b9f7aa6d25313e662b9dd09ed6aa5368d5c213e0523f0706
certmonger-debuginfo-0.77.5-1.el6.i686.rpm SHA-256: 85426d316db67781faf03a975f100e11c6810b97c2600e2f4c6832e6a669716e

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
certmonger-0.77.5-1.el6.src.rpm SHA-256: af30fad7e59a2d6043945ef679c1060076b8af6eb7ac14c90a9a28b040cfb888
s390x
certmonger-0.77.5-1.el6.s390x.rpm SHA-256: 169e1071c955ebd917de2297f24e6c1326d06e19f064a826ecefcdb3e406eb56
certmonger-debuginfo-0.77.5-1.el6.s390x.rpm SHA-256: 8406f0753077e43aa7e381bd79a1276ab858262f82813d848ace73748e759821

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

About

  • Red Hat Subscription Value
  • About Red Hat
  • Red Hat Jobs
Copyright © 2022 Red Hat, Inc.
  • Privacy Statement
  • Customer Portal Terms of Use
  • All Policies and Guidelines
Red Hat Summit
Twitter