Globus Toolkit® 3.2 Alpha Security Release Notes

Improvements/Bug Details

  • CRL Support for Java GSI libraries
  • Support for authorization callouts. These callouts can be used to replace gridmap based authorization/mapping and to enforce finer grained authorization in the GT2 GRAM component
  • OpenSSL has been upgraded to version 0.9.7. This will may require updates to your gridmap file. See bug 575 for details
  • grid-proxy-init now checks that the certificate and the private key match
  • CRL checking for C GSI libraries now handles the lastUpdate and nextUpdate fields correctly
  • The Globus CA setup package is now no longer part of the distribution. Users requiring certificates for testing should take a look at the Globus Certificate Service or Simple CA. Note that you will not be able to run grid-cert-request until you have installed a CA setup package.
  • grid-cert-renew has been removed from the distribution
  • For grid services specific security changes please see the core release notes
  • The grid-default-ca utility has been added to the distribution
  • Various minor API changes have been made (Proxy Core, Cert Utils, System Config)
  • Fixed bugs 590, 978, 982, 1018, 1028, 1091, 1126, 1143, 1151, 1171, 1304, 1308