June 2012 - caops-wg - lists.ogf.org

Migration to OGF Redmine for the CAOPS-WG and import of gridforge documents
by David Groep 25 Jun '12

25 Jun '12

Dear all, Some of you may already have heard that Open Grid Forum is changing their document management system from SourceForge (GridForge) to Redmine. This should alleviate systems maintenance and bring down costs, and the new service should be more stable and easier to manage. The new OGF Redmine is at https://redmine.ogf.org/ A downside it that all content needs to be migrated, and a new structure must be built up. During the CAOPS meeting in Delft at OGF35 we decided to move CAOPS now, migrating the current documents from Gridforge to Redmine. I was the lucky victim to try it for you - and the initial migration has just happened: - *all* documents from gridforge have been preserved. The raw dump hereof is available on redmine under "Files": <https://redmine.ogf.org/projects/caops-wg/files> as a multi-part rar archive -- since Redmine has a max upload file size of a mere 5 MByte. No data have been lost - contents have been imported manually into the Redmine DMSF Document store: <https://redmine.ogf.org/dmsf/caops-wg> in a structure based on the GFD type (Informational, Recommendations, Community Practice). - history of all documents has been preserved, although in some cases historic versions are bundled up in a single ZIP file also retired documents are there ("Retired") since we may revive them at a future date. - wiki contents are also migrated - documents of the former LoA-RG have been consolidated into CAOPS - we use no other features of gridforge, apart froma lone tracking item that was no longer relevant (OCSP requirement progress, used during GGF13) You can view all documents by going to redmine now, but for group members: - please sign up to redmine (the account management is not joint, sorry) - click "request to join" so we can sign you up to the group - start contributing to documents and discussions, or maintain the wiki ;-) I hope we learn to work with Redmine as we have learned to deal with Gridforge ... questions and suggestions to me and the list please! Cheers, DavidG. -- David Groep ** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group ** ** Room: H1.50 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

Re: [caops-wg] Updated version GFD.125bis "Grid Certificate Profile" intended for PREC
by David Groep 25 Jun '12

25 Jun '12

Dear Reimer (cc: WG), On 2012-06-18 11:41, Reimer Karlsen-Masur, DFN-CERT wrote: > Hi David, > > a couple of remarks: > > 1. Why is SHA-2 for CA certs a SHOULD (section 2) when it is "only" > RECOMMENDED for EE-certs (section 3)? For RFC2119 the "SHOULD" and "RECOMMENDED" are the same ... "there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course." > > 2. Typo in footnote 12 "It no..." Thanks - fixed in v0.5! Also the "forward slash" as noted by John Kewley has been fixed now. Since OGF is migrating all document from GridForge to Redmine (https://redmine.org.org/) also the new version 0.5 is uploaded there: https://redmine.ogf.org/dmsf_files/25?download=66 with the revision history at <https://redmine.ogf.org/dmsf_files/25>. A copy is also still held in GridForge. Cheers, DavidG. -- David Groep ** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group ** ** Room: H1.50 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

PKPWP draft ready(ish) for discussion
by Jens Jensen 17 Jun '12

17 Jun '12

Folks, I finally got the draft document transferred onto the wiki, just about in time for CAOPS tomorrow morning. https://grid.ie/eugridpma/wiki/GuidelineOnPrivateKeyProtection2 ... which took a little more editing of bullet/numbering and stuff but I think I got it right. Moreover, I think I managed to simplify a few things. Things to ponder is the distinction between the different flavours of private keys, ie protected key, activation data, activated key. I've tried to keep it generic-ish, so a key is not necessarily an RSA key, although it does mention "certificate" and CA. Thanks --jens

1 0

CAOPS sessions at OGF35 in Delft
by Mike Jones 16 Jun '12

16 Jun '12

Folks, We have two sessions scheduled for CAOPS on Monday between 0900 and 1230. A tentative agenda has been posted here http://bit.ly/OGF35CAOPS Please let me know if you wish to add to (or take from) this. See you in Delft. Rgds, Mike

3 3

Updated version GFD.125bis "Grid Certificate Profile" intended for PREC
by David Groep 07 Jun '12

07 Jun '12

Dear all, Following the discussions in Oxford and later, I had uploaded a new version of the "revised" Grid Certificate Profile to GridForge: https://forge.ogf.org/sf/go/doc16402 and have now put there a new (v3) edition which addresses a comment raised by Roberto Cecchini: > I'm referring to the paragraphs 2.4.4 (AuthorithyInfoAccess) and 2.4.5 > (which, IMHO, should be 2.4.4.1). From the document I didn't understand > if the AIA extension is a MUST/SHOULD/COULD/COULDN'T and so on... which is addressed by making the "may" into a "MAY" and adding a footnote with a proposed explanatory text in 2.4.4. Please have a look and comment on this change. Let's also try to converge on a final version by OGF35 in Delft (in two weeks) to that it can go on to the Editor. See you @OGF35! DavidG. -- David Groep ** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group ** ** Room: H1.50 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0