User:Msalle@nikhef.nl

From PDP/Grid Wiki
Jump to navigationJump to search

Projects:

nl.nikhef.slcshttps

Method used by the IMDI browser to obtain a certificate, see image below

  1. User click/chooses initialization option
  2. java browser starts a webbrowser
  3. which points to the online CA at SURFnet
  4. Online CA redirects webbrowser to Identity Provider chosen by user
  5. User logs in
  6. webbrowser redirects back to online CA. Webbrowser can now be closed
  7. After confirmation java browser now connects itself to online CA
  8. java browser retrieves certificate from online CA

IMDI Browser handshake

Files:

Talks:

Note that you also need the BouncyCastle provider. Direct link to the JDK1.5 jarfile

gLite security

See e.g. Nikhef Site Access Control pages