RHBA-2021:2315 - Bug Fix Advisory

Topic

An update for pki-core is now available for Red Hat Enterprise Linux 7.

Description

The Public Key Infrastructure (PKI) Core contains fundamental packages
required by Red Hat Certificate System.

Bug Fix(es) and Enhancement(s):

• Revoke via REST API not working when Agent certificate not issued by CA

(BZ#1911472)

• RHEL IPA PKI - Failed to read product version String.

java.io.FileNotFoundException (BZ#1914587)

• TPS not populating Token Policy, or switching PIN_RESET=YES to NO

(BZ#1942687)

• PKI instance creation failed with new 389-ds-base build (BZ#1949136)
• CRMF requests with extensions other than SKID cannot be processed

(BZ#1949656)

• Recovery of Keys migrated to latest version of KRA fail to recover and

result in Null Point Exception (BZ#1955633)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1914587 - RHEL IPA PKI - Failed to read product version String. java.io.FileNotFoundException
• BZ - 1942687 - TPS not populating Token Policy, or switching PIN_RESET=YES to NO [rhel-7.9.z]
• BZ - 1949136 - PKI instance creation failed with new 389-ds-base build [rhel-7.9.z]
• BZ - 1949656 - CRMF requests with extensions other than SKID cannot be processed [rhel-7.9.z]
• BZ - 1955633 - Recovery of Keys migrated to latest version of KRA fail to recover and result in Null Point Exception [rhel-7.9.z]

CVEs

(none)

References

(none)