Minutes of the MiniTOP on the 2011-06-14

Setting

The MiniTOP will be held via telco

Attendees:

Topics

(skip to agenda)

new items in last meeting:

Agenda

Minutes

Workshop Weak Keys

Attendees: Marcus, Michael, Uli, dirk

Weak keys testing

first test round is to disable patch on testserver to allow weak keys to add

  1. generate 512 bit keys test (test bug #918 note #2034)

    1. openssl genrsa -out <your-server-name-domain.tld>.key 512

    2. openssl req -new -key <your-server-name-domain.tld>.key -out <your-server-name-domain.tld>.csr

    3. copy + paste to signing request

    4. copy + paste signed pub key <your-server-name-domain.tld>-pub.key

    5. test new pub key: openssl x509 -text -in <your-server-name-domain.tld>-pub.key -noout

      • should result in:
        • Subject Public Key Info:
          • Public Key Algorithm: rsaEncryption
            • RSA Public Key: (512 bit)
              • Modulus (512 bit): ...
              • Exponent: 65537 (0x10001)

  2. generate exponent 3 key test (test bug #918 note #2036)

    1. openssl genrsa -aes256 -out <your-server-name-domain.tld>.key -3 1024

    2. openssl req -new -key <your-server-name-domain.tld>.key -out <your-server-name-domain.tld>.csr

    3. copy + paste to signing request

    4. copy + paste signed pub key <your-server-name-domain.tld>-pub.key

    5. test new pub key: openssl x509 -text -in <your-server-name-domain.tld>-pub.key -noout

      • should result in:
        • Subject Public Key Info:
          • Public Key Algorithm: rsaEncryption
            • RSA Public Key: (1024 bit)
              • Modulus (1024 bit): ...
              • Exponent: 3 (0x3)
  3. OA server keys test

Meeting [22:35]

Attendees: Michael, Uli, dirk, mario, magu

Fixed Action Items since last Meeting

Action Items New

  1. dirk ? michael ? jandd ? alexander ? sven ? - next strategy for "New Roots & Escrow" - get in contact with debian group

  2. dirk, michael, uli - annoying bug #911 (gpg expires 1970), activate gpg on testserver ? pickup upcoming weekend ?

  3. uli, marcus - Testserver + Software Testers - task based help

Action items: Meeting Action Items

Software/Assessment/ActionItems

  • Marcus

    cap.php review different languages, from meeting 2012-04-24, contact translators

    {+}

    uli

    Experience points for ATE attendance
    check board motions and/or trigger if not yet passed

    {0}

    uli

    Infrastructure separation, to contact secure-u (Frank, Mario, Ted, Sebastian) for discussion, prepare a plan, started 2011-12-18
    current state: see Funding Landing Page

    {0}

    All

    1. next: strategy for "New Roots & Escrow" - using indirect crl's ?
    indirect CRL: RFC 5280 http://tools.ietf.org/html/rfc5280 (chapter 5) - test deployment

    {0}

    dirk, Michael

    3. next: strategy for "New Roots & Escrow" - how does debian work?
    to contact, deferred to next events (?)

    {o}

    Uli, Michael

    Documentation Bugs.cacert.org Review, documentation I (bugs handbook) svg files to convert to jpg or png

    {0}

Development, Deployment, Discussion

  • dirk Brian

    DEV: bug#918 (Part II) (a20110312.1) Weak keys: /pages/account/.. 4.php, 17.php to combine ? (/includes/keygen.php)

    new bug#964
    current state: test /account/4.php added to testserver
    Marcus will do detailed tests on Wed
    some references added to bug#964 done.
    proposal patch from Brian rcvd

    {0}

    OAO, Ted

    bug #943 change OA admin/assurer text

    needs 2nd test -> Fabian, Marc, Alex? {g} / needs 2nd review -> Ted, rejected

    {-}

    uli, Ted

    bug #824 Org User cert fix Case study

    Organisation User Certificates: Need UI improvement for proper production usage

    {0}

    uli

    bug #988 TTP cap form deployment Case study

    sneak preview
    for local testserver deployment only

    {0}

    uli, ted

    bug #823 email address removal fix

    No warning when removing e-mail address from account that certificates will be revoked
    checked by 4, needs 2nd review, deploy
    rejected

    {-}

    inopiae

    bug #920 Join - single name only (eg Indonesian)

    details under bug number

    {0}

    uli

    bug #859 admin console interface

    feature request: show activity on an account in the admin interface
    rejected, certs login doesn't modify "modified" field

    {r}

    All

    bug #1034 files to remove from webdb

    eg wot/14

    {0}

Software Assessors: Review 1 / add to cacert-devel, add to testserver

  • Software-Assessors task

    uli

    bug #977 admin console text fix

    admin console Sysadmin - find domain - lists 2 tables - one for user accounts, one for org accounts, naming issue

    {0}

Testing

  • Testers task

    gagern

    bug #440 Problem with subjectAltName (CSR, renew certs)

    There seems to be a problem with the subjectAltName. Dupes, missing entries, and more

    {0}

    neo

    bug #922 CAcert application code problem causing missing "certificate about to expire" messages

    {0}

    Ted

    bug #835 Assurer challenge (on testserver)

    needs testing

    {0}

    Michael

    bug #1003 Provide a possibility to regularly review the permissions in the system

    also bug #1038 Provide a script for board/tverify reset flags by arbitration a20110118.1

    {0}

    neo

    bug #1025 Domain Dispute issue

    disputes rc and rc2 var prob

    {0}

Software Assessors: 2nd Review, Bundle Package to Critical Team

  • Software-Assessors task

    uli, ted

    bug #789 OA edit domain fix

    Editing domain for organisations does not work
    new update 2011-09-26
    2 tests, needs 2nd review, deploy
    more fixes, more testing

    6 {0}

    uli

    bug #967 OA isassurer check

    Give an OA the opportunity to check if a designated Organisation Administrator is a CAcert assurer

    {0}

    neo

    bug #978 Invalid SPKAC requests are not properly validated

    recheck full certs signing procedures
    duplicate report to bug#540

    {0}

    Michael

    bug #540

    p20111113 CPS #7.1.2 "Certificate Extensions" adjustments - testing
    uli, marcus: needs full cert create tests
    duplicate report to bug#978

    {0}

    neo

    bug #1024 Assurer flag is not set correctly on updatesort.php run

    tested by 4, ok

    {0}

    dirk

    bug #1023 Consolidate changes into the Assure Someone page

    6.php global re-design project
    assurance, wot area (Thawte points removal effective)

    {0}

    inopiae

    bug #981 OA overview (dupe of bug #943)

    New layout of view for Organisation Administrators in account/id35

    {0}

Software Assessors: Bundle Package to Critical Team

  • Software-Assessors task

Awaiting Response from Critical Team

Software/Assessment/20110614-S-A-MiniTOP (last edited 2011-09-23 00:04:47 by UlrichSchroeter)