[gridshib-announce] GridShib-CA 0.5.2 available

Von Welch vwelch at uiuc.edu
Fri Apr 10 20:28:08 CDT 2009


Version 0.5.2 of the GridShib-CA is available. You can download it
at http://gridshib.globus.org/download.html#gridshib-ca

It is also available for use at http://computer.ncsa.uiuc.edu

Documentation is available at:
http://gridshib.globus.org/docs/gridshib-ca-0.5.2/

Note the admin and install guide now split off and linked from the
above URL, or directly at:
http://gridshib.globus.org/docs/gridshib-ca-0.5.2/admin/index.html

This is a bugfix and maintenance release with some hardening against
CSRF and clickjacking attacks. No new features. Full list of changes
are at the following URL and listed below.
http://gridshib.globus.org/docs/gridshib-ca-0.5.2/changelog.html#version-0.5.2

    * Hardened against CSRF attacks (see Bug 6610)
    * Added code to login.cgi to prevent clickjacking (see Bug 6649)
    * Changed from InQueue to InCommon in default
authorizedIdps.conf file
    * Added ProtectNetwork
(https://idp.protectnetwork.org/protectnetwork-idp) to default
authorizedIdps.conf
    * Bug fixes: 5860, 6517, 6522, 6560

The GridShib team.



More information about the gridshib-announce mailing list