Hellas Grid CA Christos Kanellopoulos Aristotle University of Thessaloniki

1
Hellas Grid CAChristos KanellopoulosAristotle
University of Thessaloniki
2
Hellas Grid CA

• Was created during the 2nd quarter of 2002- It
  will cover the needs of CrossGrid project along
  with those of the Hellas Grid project that is
  about to make its start.- It is managed by
  PHYSNET team at the department of Physics,
  Aristotle University of Thessaloniki
• http//pki.physics.auth.gr/hellasgrid-ca

3
Hellas Grid CP/CPS

• http//pki.physics.auth.gr/hellasgrid-ca/CPS
• Follows the RFC 2527 structure
• O.I.D. 1.3.6.1.4.1.13089.2.1.1.1.3

4
Hellas Grid Operational Standards

• CA is hosted on a dedicated server located in a
  secure, controlled environment
• CA machine is not attached to the network
• Private key (2048 bits) is kept in a safe
• Pass phrase at least 15 characters

5
Hellas Grid CA certificate

• http//pki.physics.auth.gr/hellasgrid-ca/CA
• The Hellas Grid certificate is signed by PHYSNET
  ROOT CA
• Life time of 3 years

6
Requesting a Hellas Grid certificate

• The subject must be an acceptable end user
  entity as defined by the Hellas Grid Policy
• The request must obey the Hellas Grid name
  scheme
• The distinguished name must be unambiguous and
  unique
• The key must have at least 1024 bits.

7
Revocation of a certificate

• loss or compromise of the private key
• The subject of the certificate has ceased its
  relation with crossgrid or hellasgrid
• The information in the certificate is wrong or
  inaccurate.
• The system to which the certificate has been
  issued has been retired

8
Hellas Grid CRLs

• http//pki.physics.auth.gr/hellasgrid-ca/CRL
• CRLs will be published as soon as issued and at
  least once every 30 days.
• The minimum CRL lifetime is 7 days
• CRLs are issued at least 7 days before
  expiration.

9
Records Archival

• The RA will record and archive all certificate
  requests and confirmations
• The CA will record and archive the following

10
Contact Information
The contact person for questions related with
HellasGrid CA related issues is Kanellopoulos
Christos Department of Physics Aristotle
University of Thessaloniki University
Campus 54124 Thessaloniki GREECE Phone (
30) 310998223 Fax ( 30) 310999428 E-mail
C.Kanellopoulos_at_physics.auth.gr
11
THE END