PKI Component Packages#
Dogtag 9.0#
The following table lists all PKI component packages with a brief description of their purpose along with their Fedora build and runtime dependencies:
PKI Component
Description
Fedora Build Dependencies
Fedora Runtime Dependencies
‘dogtag-pki-theme’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
dogtag-pki-common-theme
Conflicts: |
redhat-pki-common-theme |
Conflicts: |
redhat-pki-common-ui |
Obsoletes: |
ipa-pki-common-theme <= 9999 |
Provides: |
ipa-pki-common-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-common-ui <= 9 |
Provides: |
pki-common-theme = %{version}-%{release} |
Provides: |
pki-common-ui = %{version}-%{release} |
dogtag-pki-ca-theme
Conflicts:
redhat-pki-ca-theme
Conflicts:
redhat-pki-ca-ui
Obsoletes:
ipa-pki-ca-theme <= 9999
Provides:
ipa-pki-ca-theme = %{version}-%{release}
Obsoletes:
dogtag-pki-ca-ui <= 9
Provides:
pki-ca-theme = %{version}-%{release}
Provides:
pki-ca-ui = %{version}-%{release}
dogtag-pki-common-theme = %{version}-%{release}
dogtag-pki-kra-theme
Conflicts: |
redhat-pki-kra-theme |
Conflicts: |
redhat-pki-kra-ui |
Obsoletes: |
ipa-pki-kra-theme <= 9999 |
Provides: |
ipa-pki-kra-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-kra-ui <= 9 |
Provides: |
pki-kra-theme = %{version}-%{release} |
Provides: |
pki-kra-ui = %{version}-%{release} |
dogtag-pki-common-theme = %{version}-%{release}
dogtag-pki-ocsp-theme
Conflicts: |
redhat-pki-ocsp-theme |
Conflicts: |
redhat-pki-ocsp-ui |
Obsoletes: |
ipa-pki-ocsp-theme <= 9999 |
Provides: |
ipa-pki-ocsp-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-ocsp-ui <= 9 |
Provides: |
pki-ocsp-theme = %{version}-%{release} |
Provides: |
pki-ocsp-ui = %{version}-%{release} |
dogtag-pki-common-theme = %{version}-%{release}
dogtag-pki-ra-theme
Conflicts: |
redhat-pki-ra-theme |
Conflicts: |
redhat-pki-ra-ui |
Obsoletes: |
ipa-pki-ra-theme <= 9999 |
Provides: |
ipa-pki-ra-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-ra-ui <= 9 |
Provides: |
pki-ra-theme = %{version}-%{release} |
Provides: |
pki-ra-ui = %{version}-%{release} |
dogtag-pki-tks-theme
Conflicts: |
redhat-pki-tks-theme |
Conflicts: |
redhat-pki-tks-ui |
Obsoletes: |
ipa-pki-tks-theme <= 9999 |
Provides: |
ipa-pki-tks-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-tks-ui <= 9 |
Provides: |
pki-tks-theme = %{version}-%{release} |
Provides: |
pki-tks-ui = %{version}-%{release} |
dogtag-pki-common-theme = %{version}-%{release}
dogtag-pki-tps-theme
Conflicts: |
redhat-pki-tps-theme |
Conflicts: |
redhat-pki-tps-ui |
Obsoletes: |
ipa-pki-tps-theme <= 9999 |
Provides: |
ipa-pki-tps-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-tps-ui <= 9 |
Provides: |
pki-tps-theme = %{version}-%{release} |
Provides: |
pki-tps-ui = %{version}-%{release} |
dogtag-pki-console-theme
Conflicts: |
redhat-pki-console-theme |
Conflicts: |
redhat-pki-console-ui |
Obsoletes: |
ipa-pki-console-theme <= 9999 |
Provides: |
ipa-pki-console-theme = %{version}-%{release} |
Obsoletes: |
dogtag-pki-console-ui <= 9 |
Provides: |
pki-console-theme = %{version}-%{release} |
Provides: |
pki-console-ui = %{version}-%{release} |
java >= 1:1.6.0
‘pki-core’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-setup
Perl scripts intended for management of CA, DRM, OCSP, RA, TKS, and TPS subsystem instances
A Java Native Interface (JNI) library composed of symmetric key functions
pki-native-tools
Various stand-alone PKI tools created from C, C++, Perl, bash, etc.
pki-util
Low-level PKI utilities
pki-util-javadoc
‘pki-util’ Javadocs.
pki-util = %{version}-%{release}
pki-java-tools
Various PKI tools created as stand-alone Java applications.
pki-java-tools-javadoc
‘pki-java-tools’ Javadocs.
pki-java-doc = %{version}-%{release}
pki-common
Common PKI functions shared by the CA, DRM, OCSP, and TKS subsystems
pki-common-javadoc
‘pki-common’ Javadocs.
pki-common = %{version}-%{release}
pki-selinux
Selinux policies used by the PKI components.
pki-ca
Certificate Authority
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
pki-silent
Java utility used for batch configuration of CA, DRM, OCSP, TKS, RA, and TPS subsystem instances
pki-core-debuginfo
‘pki-core’ subpackage for debugging containing symbols for ‘pki-symkey’ and ‘pki-native-tools’
‘pki-kra’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-kra
Data Recovery Manager
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
‘pki-ocsp’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-ocsp
Online Certificate Status Protocol Manager
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
‘pki-ra’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-ra
Registration Authority
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
‘pki-tks’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-tks
Token Key Service for Smartcards
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
‘pki-tps’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-tps
Token Processing System for Smartcards
Requires(post): |
chkconfig |
Requires(preun): |
chkconfig |
Requires(preun): |
initscripts |
Requires(postun): |
initscripts |
pki-tps-debuginfo
‘pki-tps’ subpackage for debugging.
‘pki-console’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
pki-console
PKI console for management of the CA, DRM, OCSP, and TKS subsystems
‘dogtag-pki’ (svn+ssh://svn.fedorahosted.org/svn/pki/trunk/pki)
dogtag-pki
Obsoletes: |
ipa-pki |
Conflicts: |
redhat-pki |
The following table lists the PKI “support” component packages which are separately managed by various members of the PKI team with a brief description of their purpose along with their Fedora build and runtime dependencies:
PKI Support Component
Description
Fedora Build Dependencies
Fedora Runtime Dependencies
‘osutil’ (ssh://git.fedorahosted.org/git/osutil.git)
osutil
A Java Native Interface (JNI) library composed of operating system utilities - PKI subsystems only utilize the various Base64 and getpid() functions
osutil-debuginfo
‘osutil’ subpackage for debugging.
‘tomcatjss’ (svn+ssh://svn.fedorahosted.org/svn/tomcatjss/trunk/tomcatjss)
tomcatjss
Conflicts: |
tomcat-native |
Dogtag 1.3 and Earlier#
IMPORTANT: For ALL of the following components, “{flavor}” equals “dogtag”!
The following table lists all PKI component packages with a brief description of their purpose along with their Fedora/EPEL build and runtime dependencies:
PKI Component |
Description |
Fedora/EPEL Build Dependencies |
Fedora/EPEL Runtime Dependencies |
---|---|---|---|
osutil |
A Java Native Interface (JNI) library composed of operating system utilities - PKI subsystems only utilize the various Base64 and getpid() functions |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | nspr-devel >=
nss-devel >=
3.12.3.99,
pkgconfig
|
java >=
1:1.6.0,
jpackage-utils, | nss >=
|
o sutil-debuginfo |
‘osutil’ subpackage for debugging. |
||
pki-symkey
|
A Java Native Interface (JNI) library composed of symmetric key functions +- ——+——-+ | * | ** | | NOTE | Prior | | : * | to | |
| ogtag |
| 1.3, |
| the |
| ‘p |
| ki-sy |
| mkey’ |
| RPM |
| was |
| s |
| imply |
| c |
| alled |
| ‘sy |
| mkey’ |
| and |
| cont |
| ained |
| no |
| subp |
| ackag |
| es!** |
+- ——+——-+ |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | nspr-devel >=
nss-devel >=
3.12.3.99,
pkgconfig
|
java >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | nss >=
|
pki-s ymkey-debuginfo |
‘pki-symkey’ subpackage for debugging. |
||
p ki-native-tools |
Various stand-alone PKI tools created from C, C++, Perl, bash, etc. |
cy
rus-sasl-devel, |
nspr-devel >=
4.6.99,
nss-devel >=
3.12.3.99,
svrcore-devel
|
mozldap-tools,
nss >=
3.12.3.99,
nss-tools >=
3.12.3.99
|
pki-nat ive-tools-debug |
‘pk i-native-tools’ subpackage for debugging. |
||
pki-util |
Low-level PKI utilities |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | ldapjdk, | osutil, | xerces-j2 |
java >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | ldapjdk |
p ki-util-javadoc |
‘pki-util’ Javadocs. |
%{name} = %{vers ion}-%{release} |
|
pki-setup |
Perl scripts intended for management of CA, DRM, OCSP, RA, TKS, and TPS subsystem instances |
ant |
per
l-Crypt-SSLeay, | p olicycoreutils, | %{ ?fc11:policycor eutils-python}, | % {?fc12:policyco reutils-python} |
pki-java-tools |
Various PKI tools created as stand-alone Java applications. |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | osutil, | pki-util |
java >=
1:1.6.0,
pk
i-native-tools, | pki-util |
pki-jav a-tools-javadoc |
‘ pki-java-tools’ Javadocs. |
%{name} = %{vers ion}-%{release} |
|
{flavor }-pki-common-ui |
User
interface
“flavor” for
pki-common
component
Provides:
pki-common-ui
|
ant |
|
pki-common |
Common PKI functions shared by the CA, DRM, OCSP, and TKS subsystems |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | ldapjdk, | osutil, | pki-symkey, | pki-util, | velocity, | xalan-j2 |
java >=
1:1.6.0,
jss >= 4.2.6,
osutil,
pki-common-ui,
pki-java-tools, | pki-setup, | pki-symkey, | tomcatjss, | %{_javadi r}/ldapjdk.jar, | %{_javadir }/velocity.jar, | %{_javadir }/xalan-j2.jar, | %{_javadir} /xerces-j2.jar, | velocity |
pki -common-javadoc |
‘pki-common’ Javadocs. |
pki-common = %{vers ion}-%{release} |
|
{flavor} -pki-console-ui |
User
interface
“flavor” for
pki-console
component
Provides:
|
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | ldapjdk |
java >=
1:1.6.0,
jss >= 4.2.6,
ldapjdk
|
pki-console |
PKI console for management of the CA, DRM, OCSP, and TKS subsystems |
ant,
idm-con
sole-framework, | java-devel >=
jpackage-utils, | jss >= 4.2.6, | ldapjdk, | pki-util |
idm-con
sole-framework, | java >=
jss >= 4.2.6,
ldapjdk,
pki-console-ui
|
pki-selinux |
Selinux policies used by the PKI components. |
ant,
m4,
make,
p
olicycoreutils, | selin ux-policy-devel |
p
olicycoreutils, | selinux- policy-targeted |
pki-silent |
Java utility used for batch configuration of CA, DRM, OCSP, TKS, RA, and TPS subsystem instances |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | pki-common, | pki-util |
java >=
1:1.6.0,
pki-common
|
{fl avor}-pki-ca-ui |
User
interface
“flavor” for
pki-ca
component
Provides:
pki-ca-ui
|
ant |
|
pki-ca |
Certificate Authority |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | pki-common, | pki-util, | tomcatjss |
java >=
1:1.6.0,
pki-ca-ui,
pki-common,
pki-console,
pki-selinux,
pki-silent,
(p
ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
{fla vor}-pki-kra-ui |
User
interface
“flavor” for
pki-kra
component
Provides:
pki-kra-ui
|
ant |
|
pki-kra |
Data Recovery Manager |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | pki-common, | pki-util, | tomcatjss |
java >=
1:1.6.0,
pki-common,
pki-console,
pki-kra-ui,
pki-selinux,
pki-silent,
(p
ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
{flav or}-pki-ocsp-ui |
User
interface
“flavor” for
pki-ocsp
component
Provides:
pki-ocsp-ui
|
ant |
|
pki-ocsp |
Online Certificate Status Protocol Manager |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | pki-common, | pki-util, | tomcatjss |
java >=
1:1.6.0,
pki-common,
pki-console,
pki-ocsp-ui,
pki-selinux,
pki-silent,
(p
ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
{fla vor}-pki-tks-ui |
User
interface
“flavor” for
pki-tks
component
Provides:
pki-tks-ui
|
ant |
|
pki-tks |
Token Key Service for Smartcards |
ant,
java-devel >=
1:1.6.0,
jpackage-utils, | jss >= 4.2.6, | pki-common, | pki-util, | tomcatjss |
java >=
1:1.6.0,
pki-tks-ui,
pki-common,
pki-console,
pki-selinux,
pki-silent,
(p
ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
{fl avor}-pki-ra-ui |
User
interface
“flavor” for
ra component
Provides:
pki-ra-ui
|
ant |
|
pki-ra |
Registration Authority |
ant |
mod_nss >=
1.0.7,
mod_perl >=
1.99_16,
mozldap >=
6.0.2,
pk
i-native-tools, | pki-ra-ui, | pki-selinux, | pki-setup, | pki-silent, | p erl-DBD-SQLite, | sendmail, | sqlite, | (p ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
{fla vor}-pki-tps-ui |
User
interface
“flavor” for
tps component
Provides:
pki-tps-ui
|
ant |
|
pki-tps |
Token Processing System for Smartcards |
apr-devel,
apr-util-devel, | cy rus-sasl-devel, | httpd-devel
mozldap-devel,
nspr-devel >=
4.6.99,
nss-devel >=
3.12.3.99,
pcre-devel,
svrcore-devel,
zlib,
zlib-devel
|
mod_nss >=
1.0.7,
mod_perl,
mozldap,
pk
i-native-tools, | pki-selinux, | pki-setup, | pki-silent, | pki-tps-ui, | (p ost):chkconfig, | (pr eun):chkconfig, | (preu n):initscripts, | (post un):initscripts |
pk i-tps-debuginfo |
‘pki-tps’ subpackage for debugging. |
||
pki-tps-devel |
Symlinks to the {flavor} Certificate System Token Processing System library files required to link executables. |
%{name} = %{vers ion}-%{release} |
|
{flavor}-pki |
Meta package used for convenient installation of all ‘{flavor}-pki’ services. |
{flavor}
-pki-common-ui, | {flavor}- pki-console-ui, | {fla vor}-pki-ca-ui, | {flav or}-pki-kra-ui, | {flavo r}-pki-ocsp-ui, | {fla vor}-pki-ra-ui, | {flav or}-pki-tks-ui, | {flav or}-pki-tps-ui, | pki-ca, | pki-kra, | pki-ocsp, | pki-ra, | pki-tks, | pki-tps, | esc, | pki- common-javadoc, | pki-java -tools-javadoc, | p ki-util-javadoc |
|
[STRIKE OUT:pki-manage] |
[STRIKEOUT:Perl scripts intended for management of CA, DRM, OCSP, RA, TKS, and TPS subsystems] +- ——+——-+ | * | **As | | NOTE | of | | : * | D | |
| 1.3, |
| the |
| ‘p |
| ki-ma |
| nage’ |
| RPM |
| has |
| been |
| ‘dis |
| conti |
| nued’ |
| on |
| F |
| edora |
| /EPEL |
| plat |
| forms |
| in |
| favor |
| of |
| ‘yum’ |
| and |
| ‘yum |
| -util |
| s’!** |
+- ——+——-+ |
[STRIKEOUT:ant] |
[STRIKEOUT:perl >= 5.8.0] |
[STRIKEO UT:pki-migrate] |
[STRI KEOUT:Pre-built applications created to migrate data between various versions of Certificate System] +- ——+——-+ | * | **As | | NOTE | of | | : * | D | |
| 1.3, |
| the |
| ‘pk |
| i-mig |
| rate’ |
| RPM |
| has |
| been |
| ‘d |
| iscon |
| tinue |
| d’!** |
+- ——+——-+ |
[STRIKEOUT:ant java-devel >= 1:1.6.0 jpackage-utils] |
[STRIKEOUT:java >= 1:1.6.0] |