Hi, Here is the report from the ONAP security sub-committee.
In the last two weeks, two proposals have been discussed. * Certificate management and secure communication between the onap components. This can be found here: https://wiki.onap.org/download/attachments/11928162/ONAP-Security-CCS-Proposal_v2.pptx?api=v2 * This is a proposal to have a way for the ONAP components to access certificates in a common way. It can allow an ONAP depoloyment to run a certificate authority, or to have a plug into to communicate to an existing one (but keeping the same interface to the ONAP components). * Service Server Service - which can be found Here: https://wiki.onap.org/download/attachments/11928162/ONAP-Security-Secret-Server-Proposal_v1.pptx?api=v2 * This is a proposal to securily store secretes, such as passwords, and access them in a common way. * These two proposoals have a lot in common, and could result in a project that creates modules to offer these two services. * Things to be done: * Coordinate with AAF to ensure no overlap. Need to see whether this should be part of AAF or a separate project. (that would be a TSC decision when the project is proposed). * Check architecture implications (which would have a simular discussion). Still being progressed is the static code scanning. BR, Steve [Ericsson]<http://www.ericsson.com/> STEPHEN TERRILL Technology Specialist DUIC, Systems and Technology Development Unit IP & Cloud Business Unit, IT & Cloud Products Ericsson Ericsson R&D Center, via de los Poblados 13 28033, Madrid, Spain Phone +34 339 3005 Mobile +34 609 168 515 [email protected] www.ericsson.com [http://www.ericsson.com/current_campaign]<http://www.ericsson.com/current_campaign> Legal entity: Ericsson España S.A, compay registration number ESA288568603. This Communication is Confidential. We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer<http://www.ericsson.com/email_disclaimer>
_______________________________________________ ONAP-TSC mailing list [email protected] https://lists.onap.org/mailman/listinfo/onap-tsc
