Difference between revisions of "JGridstart/Notes"

From PDP/Grid Wiki
Jump to navigationJump to search
(add TODOs)
(add template)
 
(5 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
some notes on [[User:Wvengen@nikhef.nl/JGridStart]]
+
{{JGridstart}}some notes on [[JGridstart]]
  
 
* Private key (&passphrase)
 
* Private key (&passphrase)
Line 10: Line 10:
 
** [http://library.gnome.org/devel/hig-book/stable/ Gnome HIG]
 
** [http://library.gnome.org/devel/hig-book/stable/ Gnome HIG]
 
** [http://developer.apple.com/documentation/userexperience/Conceptual/AppleHIGuidelines/ Apple HIG]
 
** [http://developer.apple.com/documentation/userexperience/Conceptual/AppleHIGuidelines/ Apple HIG]
−
* Review certificate parameters before releasing, also by others
 
−
** CertificatePair.generateRequest(): sigAlgName, keyAlgName
 
−
** CertificatePair.generateRequest(): CSR attributes
 
  
 
==TODO==
 
==TODO==
Line 27: Line 24:
 
** [bug] [Mac] explicitely set base url in jar or stylesheet cannot be found
 
** [bug] [Mac] explicitely set base url in jar or stylesheet cannot be found
 
* gui
 
* gui
−
** make show/hide certificate list work on Java 1.5 and below
 
−
** CertificateList: main organisation(s) large, name smaller & add icons: green checksign / yellow ! / red cross / green recycling (renewal)
 
 
** Make default certificate bold and place on top of list
 
** Make default certificate bold and place on top of list
−
** Save dialogs: add extension when not supplied
 
 
** Import: if base64 encoding of cert/CSR is equal to another one ask whether to overwrite or ignore.
 
** Import: if base64 encoding of cert/CSR is equal to another one ask whether to overwrite or ignore.
 
** concurrency !!
 
** concurrency !!
 
** [bug] selecting certificate in menu doesn't update certificatelist when an invalid certificate is present but it is not the last certificate
 
** [bug] selecting certificate in menu doesn't update certificatelist when an invalid certificate is present but it is not the last certificate
 
** [bug] certificate list becomes empty after refresh when a certificate is removed from disk
 
** [bug] certificate list becomes empty after refresh when a certificate is removed from disk
−
* Naming of certificate directories is now "user-cert-1234". It might be a good idea to add a meaningful identifier, like organisation name.
+
* Naming of certificate directories should be related to certificate date, not import date
 
* give the possibility to re-upload a CSR (when no certificate present)
 
* give the possibility to re-upload a CSR (when no certificate present)
 
* for email links to RA/CA, add DN and modulus.first20 in body
 
* for email links to RA/CA, add DN and modulus.first20 in body
Line 41: Line 35:
 
==Future ideas==
 
==Future ideas==
 
* Make estimated guess for some request form fields
 
* Make estimated guess for some request form fields
−
** Organisation: ip-address, emailaddress (specify in organisations.conf)
+
** Organisation: ip-address, emailaddress (specify in organisations.conf); currently specified in jnlp/default properties
−
** Country: [http://sourceforge.net/projects/geoip/ GeoIP]
 
 
** Name: from system user
 
** Name: from system user
 
** Certification level: detect demo/tutorial from hostname/ip-range/systemname/...
 
** Certification level: detect demo/tutorial from hostname/ip-range/systemname/...
−
* allow installation into the non-default system browser
 

Latest revision as of 12:39, 29 March 2012

<sidebar>

  • jGridstart
    • JGridstart|Home
    • JGridstart/Help|Help
    • JGridstart/Support|Support
  • jGridstart for ...
    • JGridstart/Certificate_Authorities|Certificate Authorities
    • JGridstart/Developers|Developers

</sidebar>some notes on JGridstart

  • Private key (&passphrase)
    • keep in memory with timeout when appropriate
    • make sure it doesn't hit swap, if possible -- MEM06-C
    • MSC31-J never hardcode sensitive information
    • make sure it's not serializable
    • Securing Java, part 1, 2 and 3.
  • Human Interface Guidelines

TODO

  • passwords
    • try again when password fails, stop after a couple of times
    • show how many passwords remembered and add action to forget
    • separate ui from passwordcache, implement cli
    • warn properly when unsupported password on single PKCS#12 entries are found
    • [Mac] make sure password dialog is placed on top of the relevant window, not somewhere else
  • html viewer
    • on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
    • make printing margins work, document on wiki, notify mailing list
    • [bug] [Win] html form cannot receive input unless the focus is removed from a form element and given back
    • [bug] [Mac] explicitely set base url in jar or stylesheet cannot be found
  • gui
    • Make default certificate bold and place on top of list
    • Import: if base64 encoding of cert/CSR is equal to another one ask whether to overwrite or ignore.
    • concurrency !!
    • [bug] selecting certificate in menu doesn't update certificatelist when an invalid certificate is present but it is not the last certificate
    • [bug] certificate list becomes empty after refresh when a certificate is removed from disk
  • Naming of certificate directories should be related to certificate date, not import date
  • give the possibility to re-upload a CSR (when no certificate present)
  • for email links to RA/CA, add DN and modulus.first20 in body

Future ideas

  • Make estimated guess for some request form fields
    • Organisation: ip-address, emailaddress (specify in organisations.conf); currently specified in jnlp/default properties
    • Name: from system user
    • Certification level: detect demo/tutorial from hostname/ip-range/systemname/...
Retrieved from "https://wiki.nikhef.nl/grid/index.php?title=JGridstart/Notes&oldid=7666"