110 likes | 249 Vues
SCS update TF-EMC2 Florence. INFN Florence, Italy March 28, 2007 Guy Van Den Bergh Project Development Officer vandenbergh@terena.org www.terena.org. GlobalSign has new owners. What happens to CA hierarchy?. What happens now GlobalSign isn ’ t part of Cybertrust anymore?
E N D
SCS updateTF-EMC2 Florence INFNFlorence, ItalyMarch 28, 2007 Guy Van Den BerghProject Development Officer vandenbergh@terena.orgwww.terena.org
GlobalSign has new owners vandenbergh@terena.org
What happens to CA hierarchy? • What happens now GlobalSign isn’t part of Cybertrust anymore? • New management has confirmed that nothing will change to this hierarchy for the new contract (Jan 2007 – Jan 2010) vandenbergh@terena.org
What happens to the service? • GlobalSign has redesigned its product portfolio • … and its operations. • GS websites have experienced big changes • GS websites have suffered instability • Situation seemed even unclear to our contacts • Our service has suffered operational problems as a consequence vandenbergh@terena.org
How do we get this on track? • Websites are stable again • Communication re-established • R. De Temmerman is back on the project • Update every two weeks • Stable and steady progress for open issues vandenbergh@terena.org
Projects vandenbergh@terena.org
HTTP POST interface • To be delivered end of March… • Documentation will be distributed whenever available • This will make automated submission of CSRs possible vandenbergh@terena.org
OCSP responder • Online health check of certificates • OCSP responder fed with CRL from GS • Two servers run by CESNET and SURFnet • Changes in certificate profiles • New profile for OCSP servers • New/changed profile for ‘regular’ servers(ref. in certificate to OCSP service) • Two phases: test and operational • DNS service run by TERENA • Implementation plan TBD • Kickoff conference call within 2 weeks vandenbergh@terena.org
SCS tools from CRU • CRU has published their SCS tools • Webinterface for • CSR submission (cfr. POST interface) • RA administrators (proxies, domain ownership,…) • Written in Perl, uses openssl • Language localisation possible • https://sourcesup.cru.fr/projects/scs/ vandenbergh@terena.org
New NRENs? • Joined this year: • GARR (Italy) • SUNET (Sweden) • In the process: • PIONIER (Poland) • ARNES (Slovenia) vandenbergh@terena.org
Questions? • AOF (Any Other Feedback)? vandenbergh@terena.org