[El-errata] ELBA-2017-2575 Oracle Linux 7 pki-core bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2017-2575

http://linux.oracle.com/errata/ELBA-2017-2575.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
pki-base-10.4.1-13.el7_4.noarch.rpm
pki-base-java-10.4.1-13.el7_4.noarch.rpm
pki-ca-10.4.1-13.el7_4.noarch.rpm
pki-javadoc-10.4.1-13.el7_4.noarch.rpm
pki-kra-10.4.1-13.el7_4.noarch.rpm
pki-server-10.4.1-13.el7_4.noarch.rpm
pki-symkey-10.4.1-13.el7_4.x86_64.rpm
pki-tools-10.4.1-13.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/pki-core-10.4.1-13.el7_4.src.rpm



Description of changes:

[10.4.1-13]
- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
   [pki-core-server-access-banner-retrieval-validation.patch]

[10.4.1-12]
- Resolves: rhbz 
#1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
   certificate requests (cfu)
   [PREVIOUS PATCH:  pki-core-beta.patch]
   [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
   error (cfu)
   [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
   against CMC signer (cfu)
   [PREVIOUS PATCH: 
pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
   [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
   non-signing cert requests (cfu)
   [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
   [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
   [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
   id-cmc-statusInfoV2 (cfu)
   [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
   (dmoluguw)
   [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
   (jmagne)
   [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
   certificates (cfu)
   [pki-core-system-cert-CMC-enroll-profile.patch]