SCS update TF-EMC2 Florence

1
SCS updateTF-EMC2 Florence

• INFNFlorence, ItalyMarch 28, 2007
• Guy Van Den BerghProject Development Officer
  vandenbergh_at_terena.orgwww.terena.org

2
GlobalSign has new owners
3
What happens to CA hierarchy?

• What happens now GlobalSign isnt part of
  Cybertrust anymore?
• New management has confirmed that nothing will
  change to this hierarchy for the new contract
  (Jan 2007 Jan 2010)

4
What happens to the service?

• GlobalSign has redesigned its product portfolio
• and its operations.
• GS websites have experienced big changes
• GS websites have suffered instability
• Situation seemed even unclear to our contacts
• Our service has suffered operational problems as
  a consequence

5
How do we get this on track?

• Websites are stable again
• Communication re-established
• R. De Temmerman is back on the project
• Update every two weeks
• Stable and steady progress for open issues

6
Projects
7
HTTP POST interface

• To be delivered end of March
• Documentation will be distributed whenever
  available
• This will make automated submission of CSRs
  possible

8
OCSP responder

• Online health check of certificates
• OCSP responder fed with CRL from GS
• Two servers run by CESNET and SURFnet
• Changes in certificate profiles
• New profile for OCSP servers
• New/changed profile for regular servers(ref.
  in certificate to OCSP service)
• Two phases test and operational
• DNS service run by TERENA
• Implementation plan TBD
• Kickoff conference call within 2 weeks

9
SCS tools from CRU

• CRU has published their SCS tools
• Webinterface for
• CSR submission (cfr. POST interface)
• RA administrators (proxies, domain ownership,)
• Written in Perl, uses openssl
• Language localisation possible
• https//sourcesup.cru.fr/projects/scs/

10
New NRENs?

• Joined this year
• GARR (Italy)
• SUNET (Sweden)
• In the process
• PIONIER (Poland)
• ARNES (Slovenia)

11

• Questions?
• AOF (Any Other Feedback)?