JGridstart/Notes

some notes on User:Wvengen@nikhef.nl/JGridStart

• Private key (&passphrase)
  • keep in memory with timeout when appropriate
  • make sure it doesn't hit swap, if possible -- MEM06-C
  • MSC31-J never hardcode sensitive information
  • make sure it's not serializable
  • Securing Java, part 1, 2 and 3.
• Human Interface Guidelines
  • Gnome HIG
  • Apple HIG
• Review certificate parameters before releasing, also by others
  • CertificatePair.generateRequest(): sigAlgName, keyAlgName
  • CertificatePair.generateRequest(): CSR attributes

TODO

• passwords
  • try again when password fails, stop after a couple of times
  • show how many passwords remembered and add action to forget
  • separate ui from passwordcache, implement cli
  • warn properly when unsupported password on single PKCS#12 entries are found
• html viewer
  • on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
  • make printing margins work, document on wiki, notify mailing list
• gui
  • make show/hide certificate list work on Java 1.5 and below
  • concurrency !!
  • [bug] selecting certificate in menu doesn't update certificatelist when an invalid certificate is present but it is not the last certificate
  • [bug] certificate list becomes empty after refresh when a certificate is removed from disk
  • [bug] no level radiobutton in request wizard (second page) is selected when visiting the page for a second time after prev/next

Future ideas

• Make estimated guess for some request form fields
  • Organisation: ip-address, emailaddress (specify in organisations.conf)
  • Country: GeoIP
  • Name: from system user
  • Certification level: detect demo/tutorial from hostname/ip-range/systemname/...

Interesting links

• Certificate installation in browsers
  • SensorNet Public/Private Key Certificate Infrastructure
  • DOEgrid enrollment