Release Notes for Certificate Management System

Version 6.2 (SP 1)

Updated April, 2004

---

These release notes contain the following sections:

• Overview
• Bugs Fixed by this Patch
• Files
• Installation Procedure

---

Overview

• NSS version was upgraded from 3.7.7. to 3.7.11

• Fixes problem of creating a new instance via admin console, the directory were owned by root instead of nobody.
• Fixes the slowness at the time of bulk revocation.
  
• The product  now handles double quote in the subject name field.
• Fixes problem in subject alt name extension
  

• Passwords are now not being displayed in debug log for key recovery operation
• Fixed CMSRestore.pl script  and setpin script.
• Added logging of CRL and Delta CRL update to transaction log.
• The validity of the key pair is now checked before archival
• The validity of  the key pair now checked before recovery
• Expose auth token in policy predicate
• Provides variable substitution in Profile policy Subject Name.
  
• Made Attribute class serializable
• A new Import Certificate button has been added to profile
• A more stable DRM, which does not crash under multiple threads

---

Bugs Fixed by this Patch

#34265

"Create instance of..." doesn't properly change the ownership

#50098

Bulk revocation slowness

#50204

Handle subject name with double-quote

#50665

Upgrade problem for subject alt name extension

#50707

Passwords being displayed in debug log for key recovery operation

#51749

CMSRestore.pl script aborts with "insufficient arguments" error

#56338

Setpin cannot be used to repeatedly add a pin to a user

#52301

Added logging of CRL and Delta CRL update to transaction log.

#52306

Remove superfluous log messages on failure

#54948

Check the validity of the key pair before archival

#55563

Made Attribute class serializable

#55918

Check the validity of the key pair before recovery

#56230

Expose auth token in policy predicate

#56367

Profile policy Subject Name is not doing variable substution

#56336

Add Import Certificate button to profile

#56637

DRM crashed under multiple threads

CA issues a cert when "nullAuthMgr" specified.

Files

• Readme File
• Installation Script
• Server Jar Files
• Console Jar Files

• Admin Executables

• Template Files
• Tools
• Library Files
  

Readme File

• readme.txt

Installation Script

• install.sh

Server Jar Files

• bin/cert/jars/certsetup.jar
• bin/cert/jars/certsrv.jar
  
• bin/cert/jars/cms.jar
• bin/cert/jars/cmsbundle.jar
• bin/cert/jars/cmscore.jar
• bin/cert/jars/cmstools.jar
• bin/cert/jars/cmsutil.jar
• bin/cert/jars/nsutil.jar
• bin/cert/jars/jss3.jar

Console Jar Files

• java/jars/cms62.jar
• java/jars/cms62_en.jar

Admin Executables

• bin/cert/admin/bin/config_cgi
• bin/cert/admin/bin/nsupdate
• bin/cert/admin/bin/remove
• bin/cert/admin/bin/restart
• bin/cert/admin/bin/start
• bin/cert/admin/bin/start_daemon
• bin/cert/admin/bin/status
• bin/cert/admin/bin/stop
• bin/cert/admin/bin/uninstall

Template Files

• web-apps/agent/ca/ProfileReview.template
• web-apps/agent/ca/srchCert.template
• web-apps/ee/ca/ProfileSubmit.template
• web-apps/ee/ra/ProfileSubmit.template

Tools

• bin/cert/tools/CMSRestore.pl
• bin/cert/tools/setpin

Library Files

• (Linux)

• (Solaris)

---

Installation Procedure

1. Make sure the CMS instance is already configured.
2. Stop all servers including Administration Server, LDAP Server, and CMS Server.
3. Run installation script (read the top few lines of the script before running).
4. Restart Administration Server, and all LDAP Servers.
5. Need to add the following parameters to <server-root>/setup/cert/install.log
   

Use of this product is subject to the License accompanying the product. Copyright © 2001 Sun Microsystems, Inc.
Portions copyright © 1999, 2002-2003 Netscape Communications Corporation. All rights reserved.