There was a change in behaviour in this version. The name matching in globus-gssapi-gsi can be done in 3 different ways. - the old very non-standard behaviour used in GT2 - according to RFC 2818 - a hybrid mode that accepts both of the above The old default was the hybrid mode, the new version now sets the default to RFC 2818. For details see /etc/grid-security/gsi.conf From the description of the of GT2 mode in the above file I think this explains why a subject name of piggy-x was accepted as a match for the host name piggy.
Can you please also push the F22 build to stable: http://koji.fedoraproject.org/koji/buildinfo?buildID=636132 The upgrade path from F21 to F22 is currently broken because the stable version in F21 is greater than the stable version in F22.
Yes, updating to this version will trigger the postuninstall script of the previous version which has the bug. There is no way around that - this update can not change bugs in the old version's script. Updating to the next version after this - whenever that will happen will trigger the postuninstall script of this version which is fixed.