JGridstart/Certificate Authorities

From PDP/Grid Wiki
Revision as of 12:41, 13 April 2010 by Wvengen@nikhef.nl (talk | contribs) (initial version)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

jGridstart is ultimately deployed by certificate authorities that want to give users an easy way to request their user certificates on their local machine.

This page is very much a work in progress, but should provide an overview. Please contact the author if you want to deploy jGridstart for additional information.

Requirements

jGridstart is currently optmisied for certificate authorities that have an offline process for issuing certificates. This means that once a request is sent by a user, he has to wait until the certificate authority manually creates his certificate, which can take a couple of days. (Although work is being done to connect to Confusa, an online certificate authority.)

The following is required to use jGridstart:

  • Interface for submitting requests and retrieving issued certificates (usually a RESTful HTTP interface)
  • List of registration authorities and organisations where the user can go for identity verification
  • Website hosting jGridstart and a customized JNLP file.