Merge pull request #34 from mwestphall/SOFTWARE-6146-igtf-1.135

SOFTWARE-6146: Update to IGTF-1.135

Author: mwestphall

CHANGES

@@ -8,6 +8,27 @@ the VDT, then please refer to this link:
    http://vdt.cs.wisc.edu/releases/certs/ca_changes.txt
 OSG CA Package in new format (md5, sha1 hashes) to support openssl 1.x
 
+Changes from 1.134 to 1.135
+---------------------------
+Build 7 MAY 2025
+
+* Updated SlovakGrid trust anchor with extended validity (SK)
+* Withdrawn discontinued HPCI CA (JP)
+
+NOTE: the _default_ package signing key has changed to the 4th generation
+      for increased security and compatibility. The new key is a 2048 bit
+      RSA with fingerprint 565F4528EAD3F53727B5A2E9B055005676341F1A.
+      The GPG public key file can be retrieved from 
+        https://dl.igtf.net/distribution/current/GPG-KEY-EUGridPMA-RPM-4
+      and imported on rpm-based distributions with 'rpmkeys --import <file>' 
+      or on Debian (apt) based systems set in Signed-By in sources.list or
+      added as a file in /etc/apt/trusted.gpg.d/
+
+      This change was first announced in the 1.122 release (August 2023),
+      but a distribution signed with the generation-3 key remains available.
+      A signature of the gen-4 key signed by the gen-3 GPG key is available
+      from https://dl.igtf.net/distribution/current/ for validation.
+
 Changes from 1.133 to 1.134
 ---------------------------
 Build 6 MAR 2025

rpm/igtf-ca-certs.spec

@@ -1,5 +1,5 @@
-%define igtf_version 1.134
-%define osg_version  1.134
+%define igtf_version 1.135
+%define osg_version  1.135
 %define release_num  1
 %define vtag         %{osg_version}.igtf.%{igtf_version}-%{release_num}
 
@@ -61,6 +61,9 @@ sha256sum -c cacerts_sha256sum.txt
 %doc
 
 %changelog
+* Wed May 07 2025 Matt Westphall <[email protected]> - 1.135-1
+- Update to IGTF 1.135 (SOFTWARE-6146)
+
 * Thu Mar 06 2025 Mátyás Selmeci <[email protected]> - 1.134-1
 - Update to IGTF 1.134 (SOFTWARE-6101)
 

rpm/osg-ca-certs.spec

@@ -1,5 +1,5 @@
-%define igtf_version 1.134
-%define osg_version  1.134
+%define igtf_version 1.135
+%define osg_version  1.135
 %define release_num  1
 %define vtag         %{osg_version}.igtf.%{igtf_version}-%{release_num}
 %define enable_trusted_sha1_certs 0
@@ -103,6 +103,9 @@ mv certificates/* $RPM_BUILD_ROOT/etc/grid-security/certificates/
 %endif
 
 %changelog
+* Wed May 07 2025 Matt Westphall <[email protected]> - 1.135-1
+- Update to IGTF 1.135 (SOFTWARE-6146)
+
 * Thu Mar 06 2025 Mátyás Selmeci <[email protected]> - 1.134-1
 - Update to IGTF 1.134 (SOFTWARE-6101)