[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

RE: [SIGNATUR] ComputerWorld: Alvorlig sikkerhedsbrist ved TDC-signatur

Vi havde har OpenOCES koordinationsgruppemøde igår og der var stor interesse for ideen. Man ønskede et "proof-of-concept", så hvis der er nogen, som har mod på at lave et Netscape/Mozilla compliant PKCS#11 modul der anvender en PKCS#12 fil vil det være helt kanon. (Mit gæt er at der ligger lidt arbejde i pkt.3 i afsnittet "How to Create a Cryptographic Module JAR" i nedenstående link)

Hvis det skal være en del af OpenOCES projektet skal det nok baseres på GPL eller LGPL (det første foretrækkes).

Venlig hilsen
Peter Lind Damkjær

-----Original Message-----
From: Carsten Sørensen [mailto:sslug@sslug 
Sent: 12. maj 2004 19:17
To: sslug@sslug
Subject: Re: [SIGNATUR] ComputerWorld: Alvorlig sikkerhedsbrist ved TDC-signatur


Peter Lind Damkjær wrote:
> Personligt ser jeg det største problem i at en PKCS#11 
> _implementation_ er platformsspecifik og sidst jeg så på det, fandt 
> jeg ikke ud af om man umiddelbart kunne lave et 
> install-script/program, der kunne lave opsætningen i Mozilla for 
> brugeren.

http://developer.netscape.com/docs/manuals/security/jmpkcs/jimpkcs.htm

Mekanismen _er_ der, linket beskriver hvordan man pakker et antal PKCS 
#11 moduler til forskellige platforme i en JAR-fil som en slutbruger kan 
downloade og installere i Mozilla. Det er korrekt at den skal 
præ-kompileres til de understøttede platforme, men det er næsten det 
mindste problem.

> Men jeg er bestemt åben for ideen at tage det ind som et delprojekt i 
> OpenOCES, hvis der er nogen der vil lægge kræfter i det.

Jeg vil personligt meget gerne være med, jeg har trods alt både en 
personlig og professionel interesse i projektet.


Carsten Sørensen

 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:34 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *