pki-ca-10.0.7-1.fc19.noarch

The Certificate Authority (CA) is a required PKI subsystem which issues, renews, revokes, and publishes certificates as well as compiling and publishing Certificate Revocation Lists (CRLs).

The Certificate Authority can be configured as a self-signing Certificate Authority, where it is the root CA, or it can act as a subordinate CA, where it obtains its own signing certificate from a public CA.

This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System.

================================== || ABOUT "CERTIFICATE SYSTEM" || ==================================

Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments.

PKI Core contains ALL top-level java-based Tomcat PKI components:

• pki-symkey pki-base pki-tools pki-selinux (f17 only) pki-server pki-ca pki-kra (fedora only) pki-ocsp (fedora only) pki-tks (fedora only) * pki-javadoc

which comprise the following corresponding PKI subsystems:

• Certificate Authority (CA) Data Recovery Manager (DRM) (fedora only) Online Certificate Status Protocol (OCSP) Manager (fedora only) * Token Key Service (TKS) (fedora only)

For deployment purposes, PKI Core contains fundamental packages required by BOTH native-based Apache AND java-based Tomcat Certificate System instances consisting of the following components:

• pki-tools * pki-selinux (f17 only)

Additionally, PKI Core contains the following fundamental packages required ONLY by ALL java-based Tomcat Certificate System instances:

• pki-symkey pki-base pki-tools * pki-server

PKI Core also includes the following components:

• pki-javadoc

Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package:

• dogtag-pki-theme (Dogtag Certificate System deployments) dogtag-pki-server-theme redhat-pki-server-theme (Red Hat Certificate System deployments) redhat-pki-server-theme customized pki theme (Customized Certificate System deployments) * -pki-server-theme

NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.