Re: How about a Certification Authority (CA) portlet in Geronimo Console?

[Vamsavardhana Reddy]

I do not know if this should affect the export classification of G, but we will still need to ascertain this.  If it does, we could provide the CA functionality with parameters and key sizes etc that will not impose any restrictions on export classification.  We can provide a configuration file that will let the users configure these parameters easily.  modules\geronimo-util and some classes in J2SE are enough to piece together most functions required by a CA.

Ideas, suggestions and comments will be very helpful.

Thanks,
Vamsi

On 9/16/06, Paul McMahan <[EMAIL PROTECTED]> wrote:

Vamsi,  interesting idea.  This is probably a dumb question, but could
implementing the necessary cryptographic functions for a CA affect
Geronimo's export classification?  I think the answer is no but hope
someone on the list might know for sure.

Best wishes,
Paul

On 9/15/06, Vamsavardhana Reddy <[EMAIL PROTECTED]> wrote:
> Hi,
>
> How about having a Certificate Authority portlet in Geronimo Console?  A
> full fledged CA may be a long way to go.  But what ever minimum function is
> required to process CSR's etc. is not hard and the users can issue their own
> digital certificates instead of getting trial certificates from some CA.  I
> have already given it a try and the minimum required function can be derived
> from what ever is available in geronimo-util module.
>
> I will wait for comments from community before proceeding further.
>
> Thanks,
> Vamsi
>