JGridstart/Notes

some notes on User:Wvengen@nikhef.nl/JGridStart

• Private key (&passphrase)
  • keep in memory with timeout when appropriate
  • make sure it doesn't hit swap, if possible -- MEM06-C
  • MSC31-J never hardcode sensitive information
  • make sure it's not serializable
  • Securing Java, part 1, 2 and 3.
• Human Interface Guidelines
  • Gnome HIG
  • Apple HIG
• Review certificate parameters before releasing, also by others
  • CertificatePair.generateRequest(): sigAlgName, keyAlgName
  • CertificatePair.generateRequest(): CSR attributes

TODO

• password management: try again when password fails, stop after a couple of times
• password management: show how many passwords remembered and add action to forget
• warn properly when unsupported password on single PKCS#12 entries are found