To Software Software - To Software-Assessment - Software/Assessment - To previous meeting - To next meeting
Minutes of the MiniTOP on the 2011-04-05
Setting
The MiniTOP will be held via telco 22:00 CEST
Attendees: Dirk, Michael, Marcus, Ted, Magu, Uli
Topics
Andreas, Markus, Michael
Signer deployment on CACERT1 test
Arbitration case a20110312.1
- State Testserver Update
- Current Patches on Testserver:
"Thawte" patch Bug# 827
- Current Patches on Testserver:
- strategy plans ...
strategy for: "Certificates Class3" problem and "New Roots & Escrow"
- next meeting: Tuesday, April 12, 2011 22:00
Minutes
Arbitration case a20110312.1
- perl script ready, for test run (for counting)
- mail text prepared by Peter
- create wiki pages still open, uli will prepare
- discussion if wiki page should be locked
- Michael: prepares test machine for patches
- CATS server emergency case - no login possible with new keys
- solved today evening, first test results looks ok
- Marcus: triage test on CATS - visible to others ?
- Action Item: translingo cacert upload.pl bug #913 (next: test, review)
- reviewed by Dirk, Michael
- Michael will start one test
- Dirk: instructions to Mendel, Wytze
- backup of script
- rename sample file
- edit login data credentials
- Action Item: regular Thawte patches, still open 15.php - add assurers state at bottom of page
- not yet checked in
- expected Thursday to checkin
- Michael: weak keys can no longer created (client certs on cacert1 testserver) (patched)
- but tests running into a problem - vuln-key package missing in chroot environment, that results in white page
- to contact wytze
- next meeting Apr 12th, 22 CEST
Action items: Meeting Action Items
- Uli: write kees mail about telco server: 2 still connections
- Michael: translingo bug #913, testrun
- Dirk, Michael, Uli: to write instructions for Critical team
- Dirk: Thawte patch 15.php - Thursday ?
- Michael, Wytze: environment for vuln-key on testserver, critical system
- Uli: create wiki page(s)
Action items from last meeting Meeting Action Items
Software/Assessment/ActionItems
Marcus
cap.php review different languages, from meeting 2012-04-24, contact translators
uli
Experience points for ATE attendance
check board motions and/or trigger if not yet passed
uli
Infrastructure separation, to contact secure-u (Frank, Mario, Ted, Sebastian) for discussion, prepare a plan, started 2011-12-18
current state: see Funding Landing Page All
1. next: strategy for "New Roots & Escrow" - using indirect crl's ?
indirect CRL: RFC 5280 http://tools.ietf.org/html/rfc5280 (chapter 5) - test deployment dirk, Michael
3. next: strategy for "New Roots & Escrow" - how does debian work?
to contact, deferred to next events (?)
Uli, Michael
Documentation Bugs.cacert.org Review, documentation I (bugs handbook) svg files to convert to jpg or png
Development, Deployment, Discussion
dirk Brian
DEV: bug#918 (Part II) (a20110312.1) Weak keys: /pages/account/.. 4.php, 17.php to combine ? (/includes/keygen.php)
new bug#964
current state: test /account/4.php added to testserver
Marcus will do detailed tests on Wed
some references added to bug#964 done.
proposal patch from Brian rcvd OAO, Ted
bug #943 change OA admin/assurer text
needs 2nd test -> Fabian, Marc, Alex?
/ needs 2nd review -> Ted, rejected 
uli, Ted
bug #824 Org User cert fix Case study
Organisation User Certificates: Need UI improvement for proper production usage
uli
bug #988 TTP cap form deployment Case study
sneak preview
for local testserver deployment only uli, ted
bug #823 email address removal fix
No warning when removing e-mail address from account that certificates will be revoked
checked by 4, needs 2nd review, deploy
rejected inopiae
bug #920 Join - single name only (eg Indonesian)
details under bug number
uli
bug #859 admin console interface
feature request: show activity on an account in the admin interface
rejected, certs login doesn't modify "modified" field All
bug #1034 files to remove from webdb
eg wot/14
Software Assessors: Review 1 / add to cacert-devel, add to testserver
Software-Assessors task
uli
bug #977 admin console text fix
admin console Sysadmin - find domain - lists 2 tables - one for user accounts, one for org accounts, naming issue
Testing
Testers task
gagern
bug #440 Problem with subjectAltName (CSR, renew certs)
There seems to be a problem with the subjectAltName. Dupes, missing entries, and more
neo
bug #922 CAcert application code problem causing missing "certificate about to expire" messages
Ted
bug #835 Assurer challenge (on testserver)
needs testing
Michael
bug #1003 Provide a possibility to regularly review the permissions in the system
also bug #1038 Provide a script for board/tverify reset flags by arbitration a20110118.1
neo
bug #1025 Domain Dispute issue
disputes rc and rc2 var prob
Software Assessors: 2nd Review, Bundle Package to Critical Team
Software-Assessors task
uli, ted
bug #789 OA edit domain fix
Editing domain for organisations does not work
new update 2011-09-26
2 tests, needs 2nd review, deploy
more fixes, more testing6
uli
bug #967 OA isassurer check
Give an OA the opportunity to check if a designated Organisation Administrator is a CAcert assurer
neo
bug #978 Invalid SPKAC requests are not properly validated
recheck full certs signing procedures
duplicate report to bug#540 Michael
p20111113 CPS #7.1.2 "Certificate Extensions" adjustments - testing
uli, marcus: needs full cert create tests
duplicate report to bug#978 neo
bug #1024 Assurer flag is not set correctly on updatesort.php run
tested by 4, ok
dirk
bug #1023 Consolidate changes into the Assure Someone page
6.php global re-design project
assurance, wot area (Thawte points removal effective) inopiae
New layout of view for Organisation Administrators in account/id35
Software Assessors: Bundle Package to Critical Team
Software-Assessors task
Awaiting Response from Critical Team