Difference between revisions of "User:Msalle@nikhef.nl"

From PDP/Grid Wiki
Jump to navigationJump to search
Line 2: Line 2:
  
 
=== nl.nikhef.slcshttps ===
 
=== nl.nikhef.slcshttps ===
 +
Method used by the IMDI browser to obtain a certificate, see image below
 +
 +
# User click/chooses initialization option
 +
# java browser starts a webbrowser
 +
# which points to the online CA at SURFnet
 +
# Online CA redirects webbrowser to Identity Provider chosen by user
 +
# User logs in
 +
# webbrowser redirects back to online CA. Webbrowser can now be closed
 +
# After confirmation java browser now connects itself to online CA
 +
# java browser retrieves certificate from online CA
 +
 
[[Image:Imdi handshake.png||IMDI Browser handshake]]
 
[[Image:Imdi handshake.png||IMDI Browser handshake]]
 +
 +
=== Files: ===
 +
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_full.zip full zip-archive] (Full zip including jar file, build, and javadoc)
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_full.zip full zip-archive] (Full zip including jar file, build, and javadoc)
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_src.zip zip-archive] (Zip including only sources, run ant to get the rest)
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_src.zip zip-archive] (Zip including only sources, run ant to get the rest)

Revision as of 21:08, 5 October 2009

Projects:

nl.nikhef.slcshttps

Method used by the IMDI browser to obtain a certificate, see image below

  1. User click/chooses initialization option
  2. java browser starts a webbrowser
  3. which points to the online CA at SURFnet
  4. Online CA redirects webbrowser to Identity Provider chosen by user
  5. User logs in
  6. webbrowser redirects back to online CA. Webbrowser can now be closed
  7. After confirmation java browser now connects itself to online CA
  8. java browser retrieves certificate from online CA

IMDI Browser handshake

Files:

Talks:

Note that you also need the BouncyCastle provider. Direct link to the JDK1.5 jarfile

gLite security

See e.g. Nikhef Site Access Control pages