Difference between revisions of "JGridstart/Notes"

From PDP/Grid Wiki
Jump to navigationJump to search
(add TODO)
(add gui TODO)
Line 23: Line 23:
 
** on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
 
** on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
 
** make printing margins work, document on wiki, notify mailing list
 
** make printing margins work, document on wiki, notify mailing list
 +
* gui
 +
** make show/hide work for buttons on main view and the certificate list
 +
** make show/hide certificate list work on Java 1.5 and below

Revision as of 16:33, 28 April 2009

some notes on User:Wvengen@nikhef.nl/JGridStart

  • Private key (&passphrase)
    • keep in memory with timeout when appropriate
    • make sure it doesn't hit swap, if possible -- MEM06-C
    • MSC31-J never hardcode sensitive information
    • make sure it's not serializable
    • Securing Java, part 1, 2 and 3.
  • Human Interface Guidelines
  • Review certificate parameters before releasing, also by others
    • CertificatePair.generateRequest(): sigAlgName, keyAlgName
    • CertificatePair.generateRequest(): CSR attributes

TODO

  • passwords
    • try again when password fails, stop after a couple of times
    • show how many passwords remembered and add action to forget
    • separate ui from passwordcache, implement cli
    • warn properly when unsupported password on single PKCS#12 entries are found
  • html viewer
    • on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
    • make printing margins work, document on wiki, notify mailing list
  • gui
    • make show/hide work for buttons on main view and the certificate list
    • make show/hide certificate list work on Java 1.5 and below