Difference between revisions of "User:Msalle@nikhef.nl"

From PDP/Grid Wiki
Jump to navigationJump to search
Line 1: Line 1:
 
= Projects: =
 
= Projects: =
  
=== nl.nikhef.slcshttps ===
+
== nl.nikhef.slcshttps ==
 +
 
 +
=== Method ===
 
Method used by the IMDI browser to obtain a certificate, see image below
 
Method used by the IMDI browser to obtain a certificate, see image below
  

Revision as of 21:09, 5 October 2009

Projects:

nl.nikhef.slcshttps

Method

Method used by the IMDI browser to obtain a certificate, see image below

  1. User click/chooses initialization option
  2. java browser starts a webbrowser
  3. which points to the online CA at SURFnet
  4. Online CA redirects webbrowser to Identity Provider chosen by user
  5. User logs in
  6. webbrowser redirects back to online CA. Webbrowser can now be closed
  7. After confirmation java browser now connects itself to online CA
  8. java browser retrieves certificate from online CA

IMDI Browser handshake

Files:

Talks:

Note that you also need the BouncyCastle provider. Direct link to the JDK1.5 jarfile

gLite security

See e.g. Nikhef Site Access Control pages