"yum --enablerepo=epel-testing install pki-ra" yields : pki-ra-1.3.1-1.el5.noarch from epel-testing has depsolving problems --> Missing Dependency: mod_nss >= 1.0.7 is needed by package pki-ra-1.3.1-1.el5.noarch (epel-testing) Latest mod_nss for RHEL/EPEL is mod_nss-1.0.3-8.el5 .
Circumvented by rebuilding and installing the mod_nss-1.0.8-3.el6.src.rpm from the RHEL6 beta repository (ftp://ftp.redhat.com/pub/redhat/rhel/beta/6/source/SRPMS/) for RHEL5. Note : to prevent a %post(mod_nss-1.0.8-3) scriptlet error, /usr/bin/find needs to be temporarily softlinked to /bin/find before installing the rebuilt mod_nss-1.0.8-3. After installing mod_nss-1.0.8-3, pki-ra-1.3.1-1 installs and configures fine in RHEL5u5. This resolution should probably apply to mod_nss-1.0.8-2.el5idm.src.rpm from ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHCERT/SRPMS/ too.