|
|
| (44 intermediate revisions by the same user not shown) |
| Line 1: |
Line 1: |
| − | Using a [http://en.wikipedia.org/wiki/Grid_Computing computing grid] requires authorisation and authentication. This is managed by [http://en.wikipedia.org/wiki/Asymmetric_cryptography asymmetric cryptography] with client-side SSL certificates. Currently, setting this up requires the user to [http://ca.dutchgrid.nl/guide/ go through] [http://www.dutchgrid.nl/agenda/askArchive.php?base=agenda&categ=a042&id=a042s3t2/moreinfo several steps] that can by quite daunting to some. jGridStart attempts to ease this process with automation and a graphical user-interface, enabling you to quickly proceed to actually using the grid.
| + | #REDIRECT [[JGridstart]] |
| − | | |
| − | jGridStart is currently being developed. I expect the first version to be ready somewhere in May 2009.
| |
| − | | |
| − | == Planned features ==
| |
| − | | |
| − | * user-interface
| |
| − | ** both graphical user-interface for easy usage by unknowledgeable users
| |
| − | ** and command-line interface for cli addicts and testing.
| |
| − | ** the application should detect the state of affairs and present sensible actions only
| |
| − | ** working on multiple platforms: Linux, Windows, Mac OS X at the least
| |
| − | * single point-of-entry for management of grid certificates, including
| |
| − | ** requesting a new certificate
| |
| − | ** installing certificates into different parts of the system (like internet browsers)
| |
| − | ** rekeying an (almost expired) certificate
| |
| − | ** sending revocation requests
| |
| − | ** switching between different certificates (like the default certificate in your ~/.globus)
| |
| − | ** importing/exporting a certificate for transfer
| |
| − | ** changing the private key passphrase
| |
| − | * security checks
| |
| − | ** validate permissions of private keys
| |
| − | ** require passwords on places where private keys is stored
| |
| − | ** require passwords to pass a minimum strength test
| |
| − | ** check certificates against revocation lists
| |
| − | * adaptable configuration so it can be deployed by other parties with moderate effort
| |
| − | ** location of web forms for interaction with certificate authority
| |
| − | ** content and properties of user's certificate
| |
| − | ** name and organisation texts
| |
| − | | |
| − | | |
| − | == Notes of RA's ==
| |
| − | If you have something to add, please notify me!
| |
| − | * frequently happening problems
| |
| − | ** people often send either a certificate signing request or the form instead of both
| |
| − | ** people often send a renewal as new request because they forget to send an S/MIME mail
| |
| − | * feature requests
| |
| − | ** in registration form: identity-proof-document fields don't match the web interface ("nationality" instead of "document issuing country" and "document type")
| |
| − | ** a renewal should be sent automatically to the correct RA (same as original request but beware email changes)
| |
| − | ** in the RA interface "Authenticate request" an additional comment field would be handy
| |
| − | ** verify email by sending a confirmation link before accepting a certificate signing request
| |
| − | | |
| − | | |
| − | == Server-side ==
| |
| − | jGridStart talks with a certificate authority using http requests. The application is delivered with a simple proof-of-concept certification authority that implements the required functionality. Also the existing [http://ca.dutchgrid.nl/ DutchGrid CA web interface] will be adapted to work with it.
| |
| − | | |
| − | == Related software ==
| |
| − | * [http://argon.sao.nrc.ca/~spgrid/ SpectroGrid2] with a java web start based certificate manager (also [https://spectrogrid2.nrc.ca/portal/?q=node/3 here])
| |
| − | * [http://www.jabacats.com/ JaBaCATs] Java Basic Certificate Authority Tools
| |
| − | * [http://portecle.sourceforge.net/ Portecle] - GUI to create, manage and examine keystores, keys, certificates, requests, revocation lists and more.
| |
| − | * [http://yellowcat1.free.fr/keytool_iui.html KeyTool IUI] the cryptography GUI tool
| |
| − | * [http://gridshib.globus.org/docs/gridshib-ca-0.5.1/ gridshib-ca] contains a java web start tool that installs user certificates muchlike jGridStart, but with a minimal user interface.
| |
