Difference between revisions of "User:Msalle@nikhef.nl"

From PDP/Grid Wiki
Jump to navigationJump to search
 
(41 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
= Projects: =
 
= Projects: =
  
== nl.nikhef.slcshttps ==
+
== Grid middleware security ==
  
=== Method ===
+
This is all kinds of different security related work done within the Nikhef grid-middleware security group. See for example
Method used by the IMDI browser to obtain a certificate, see image below
+
* the [[GLExec|gLExec wiki pages]] (An overview of the different Nikhef tools can be found in the slightly outdated [[Site Access Control]] pages).
 +
* [[SAC software procedures|release process of the Grid Security Middleware]]
  
User point of view (mostly):
+
It also covers work on the Risk Assessment Team for the [https://wiki.egi.eu/wiki/SVG:SVG EGI Software Vulnerability Group].
  
# '''User''' clicks/chooses initialization option
+
== User delegation in the CLARIN Metadata Infrastructure ==
# java browser starts a webbrowser
 
# which points to the online CA at SURFnet
 
# Online CA redirects webbrowser to WAYF (Where Are You From) server where '''user''' chooses his ''Identity Provider''
 
# '''User''' logs in at ''IdP''
 
# webbrowser redirects back to online CA. '''User''' closes webbrowser.
 
# After confirmation by '''user''', java browser now connects itself to online CA
 
# java browser retrieves certificate from online CA
 
  
Technical overview:
+
This project was a joined project between CLARIN via the [http://www.mpi.nl/ The Max Planck Institute for Psycholinguistics (MPI)] and [http://www.nikhef.nl/ Nikhef] and supported by [http://www.biggrid.nl/ BiG Grid].
 +
See e.g. the [[CLARIN/OAuth2|project pages]]
  
# Initialization procedure:
+
== jGridstart ==
## javabrowser creates a keypair
 
## javabrowser creates a certificate signing request (CSR)
 
# javabrowser starts a webbrowser
 
# the URL is the online CA + a hash of the CSR
 
# Online CA redirects to the browser to the IdP via a WAYF (where are you from). This is the standard Shibboleth trajectory.
 
# User logs in and the webbrowser sends the user back to the online CA. The URL is now rewritten using Shibboleth.
 
  
 +
This is a Java webstart application to gently guide (new) Grid user in the process of obtaining their grid certificate.
 +
See e.g. [[JGridstart|project page]] for more information.
  
 +
== nl.nikhef.slcshttps ==
  
[[Image:Imdi handshake.png||IMDI Browser handshake]]
+
This project was a joined project between [http://www.mpi.nl/ The Max Planck Institute for Psycholinguistics (MPI)], [http://www.surfnet.nl/ SURFnet] and [http://www.nikhef.nl/ Nikhef] and supported by [http://www.biggrid.nl/ BiG Grid].
 
 
=== Files: ===
 
 
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_full.zip full zip-archive] (Full zip including jar file, build, and javadoc)
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_v0.1_src.zip zip-archive] (Zip including only sources, run ant to get the rest)
 
*[http://www.nikhef.nl/~msalle/slcshttps/slcshttps_jdk15_v0.1.jar JDK1.5 jarfile]
 
*[http://www.nikhef.nl/~msalle/slcshttps/doc/ Javadoc API]
 
*[https://ndpfsvn.nikhef.nl/cgi-bin/viewvc.cgi/pdpsoft/trunk/nl.nikhef.slcshttps/ SVN repository with source]
 
Talks:
 
*[http://www.nikhef.nl/~msalle/slcshttps/MPI_talk_27052009.pdf Talk at BiGGrid meeting, Nikhef, 27 May 2009]
 
 
 
Note that you also need the [http://www.bouncycastle.org/ BouncyCastle provider].
 
Direct link to the [http://www.bouncycastle.org/download/bcprov-jdk15-143.jar JDK1.5 jarfile]
 
 
 
=== gLite security ===
 
  
See e.g. [http://www.nikhef.nl/pub/projects/grid/gridwiki/index.php/Site_Access_Control Nikhef Site Access Control pages]
+
See the [[User:Msalle@nikhef.nl/nl.nikhef.slcshttps|project page]] for details.

Latest revision as of 10:05, 8 May 2015

Projects:

Grid middleware security

This is all kinds of different security related work done within the Nikhef grid-middleware security group. See for example

It also covers work on the Risk Assessment Team for the EGI Software Vulnerability Group.

User delegation in the CLARIN Metadata Infrastructure

This project was a joined project between CLARIN via the The Max Planck Institute for Psycholinguistics (MPI) and Nikhef and supported by BiG Grid. See e.g. the project pages

jGridstart

This is a Java webstart application to gently guide (new) Grid user in the process of obtaining their grid certificate. See e.g. project page for more information.

nl.nikhef.slcshttps

This project was a joined project between The Max Planck Institute for Psycholinguistics (MPI), SURFnet and Nikhef and supported by BiG Grid.

See the project page for details.