| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: idm-pki-kra | Distribution: AlmaLinux |
| Version: 11.7.1 | Vendor: AlmaLinux |
| Release: 2.el9_8 | Build date: Thu Oct 1 09:51:44 2026 |
| Group: Unspecified | Build host: s390x-builder02.almalinux.org |
| Size: 705333 | Source RPM: pki-core-11.7.1-2.el9_8.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.dogtagpki.org | |
| Summary: IDM PKI KRA Package | |
IDM PKI Key Recovery Authority (KRA) is an optional subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user's private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys.
GPL-2.0-only AND LGPL-2.0-only
* Sat Sep 19 2026 Fraser Tweedale <ftweedal@redhat.com> - 11.7.0-2 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix * Mon Nov 17 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.7.1-1 - Rebase to PKI 11.7.1 * Tue Aug 05 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.7.0-1 - Rebase to PKI 11.7.0 * Tue Jul 01 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.7.0-0.1.beta1 - Rebase to PKI 11.7.0-beta1 * Mon Feb 17 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-3 - Drop pki-est subpackage * Mon Feb 17 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-2 - Use external runtime dependencies * Thu Feb 13 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1 - Rebase to PKI 11.6.0 * Wed Dec 04 2024 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-0.2.alpha2 - Rebase to PKI 11.6.0-alpha2
/usr/share/java/pki /usr/share/java/pki/pki-kra.jar /usr/share/licenses/idm-pki-kra /usr/share/licenses/idm-pki-kra/LICENSE /usr/share/maven-metadata/pki-core-pki-kra.xml /usr/share/maven-poms/pki /usr/share/maven-poms/pki/pki-kra.pom /usr/share/pki/kra /usr/share/pki/kra/bin /usr/share/pki/kra/bin/pki-kra-run /usr/share/pki/kra/conf /usr/share/pki/kra/conf/CS.cfg /usr/share/pki/kra/conf/Catalina /usr/share/pki/kra/conf/Catalina/localhost /usr/share/pki/kra/conf/Catalina/localhost/kra.xml /usr/share/pki/kra/conf/acl.properties /usr/share/pki/kra/conf/auth-method.properties /usr/share/pki/kra/conf/uriworkermap.properties /usr/share/pki/kra/database /usr/share/pki/kra/database/ds /usr/share/pki/kra/database/ds/acl.ldif /usr/share/pki/kra/database/ds/create.ldif /usr/share/pki/kra/database/ds/index.ldif /usr/share/pki/kra/database/ds/indextasks.ldif /usr/share/pki/kra/database/ds/vlv.ldif /usr/share/pki/kra/database/ds/vlvtasks.ldif /usr/share/pki/kra/webapps /usr/share/pki/kra/webapps/kra /usr/share/pki/kra/webapps/kra/404.html /usr/share/pki/kra/webapps/kra/500.html /usr/share/pki/kra/webapps/kra/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/WEB-INF /usr/share/pki/kra/webapps/kra/WEB-INF/classes /usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties /usr/share/pki/kra/webapps/kra/WEB-INF/lib /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-server.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/resteasy-servlet-initializer.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar /usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar /usr/share/pki/kra/webapps/kra/WEB-INF/web.xml /usr/share/pki/kra/webapps/kra/admin /usr/share/pki/kra/webapps/kra/admin/console /usr/share/pki/kra/webapps/kra/agent /usr/share/pki/kra/webapps/kra/agent/GenError.template /usr/share/pki/kra/webapps/kra/agent/GenPending.template /usr/share/pki/kra/webapps/kra/agent/GenRejected.template /usr/share/pki/kra/webapps/kra/agent/GenSuccess.template /usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template /usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template /usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template /usr/share/pki/kra/webapps/kra/agent/cms-funcs.js /usr/share/pki/kra/webapps/kra/agent/funcs.js /usr/share/pki/kra/webapps/kra/agent/header.template /usr/share/pki/kra/webapps/kra/agent/helpfun.js /usr/share/pki/kra/webapps/kra/agent/index.jsp /usr/share/pki/kra/webapps/kra/agent/index.template /usr/share/pki/kra/webapps/kra/agent/kra /usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html /usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html /usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template /usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html /usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template /usr/share/pki/kra/webapps/kra/agent/kra/getStats.template /usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/index.jsp /usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html /usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html /usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html /usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html /usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html /usr/share/pki/kra/webapps/kra/agent/kra/monitor.template /usr/share/pki/kra/webapps/kra/agent/kra/processReq.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template /usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template /usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template /usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template /usr/share/pki/kra/webapps/kra/agent/kra/top.html /usr/share/pki/kra/webapps/kra/index.jsp /usr/share/pki/kra/webapps/kra/js /usr/share/pki/kra/webapps/kra/js/key.js /usr/share/pki/kra/webapps/kra/js/keyrequest.js /usr/share/pki/kra/webapps/kra/services.template /usr/share/pki/kra/webapps/kra/ui /usr/share/pki/kra/webapps/kra/ui/home.html /usr/share/pki/kra/webapps/kra/ui/index.jsp /usr/share/pki/kra/webapps/kra/ui/key.html /usr/share/pki/kra/webapps/kra/ui/keyrequest.html /usr/share/pki/kra/webapps/kra/ui/keyrequests.html /usr/share/pki/kra/webapps/kra/ui/keys.html
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Oct 3 06:54:18 2026