. '''To Software''' '''[[Software|Software]]''' - '''To Software-Assessment - ''' '''[[Software/Assessment|Software/Assessment]]''' - '''To [[Software/Assessment/20111122-S-A-MiniTOP|previous meeting]]''' - '''To [[Software/Assessment/20111206-S-A-MiniTOP|next meeting]]''' ---- = Minutes of the MiniTOP on the 2011-11-29 = == Setting == The MiniTOP will be held via telco 22:00 CET Attendees: dirk, marcus, magu, uli, werner, michael == Topics == (skip to [[#AGENDA|agenda]]) Action items from last meeting '''[[Software/Assessment/ActionItems|Meeting Action Items]]''' <> == Agenda == 1. [[https://bugs.cacert.org/view.php?id=976|bug #976]] - database restructure preperation * current state summary: * transfered to critical system, patch has been applied * database upgrade, scheduled for Wed Nov 23rd, successfully finished 1. [[https://bugs.cacert.org/view.php?id=827|bug #827]] - New Points calculation / Thawte patch 1. The patch || Dirk, Michael || [[https://bugs.cacert.org/view.php?id=827|bug #827]] and [[https://bugs.cacert.org/view.php?id=959|bug #959]] Thawte patch/Points-Count-Order-Change project || related bug 959: needs 1 more test, needs 2nd review / 2nd review: also check -x / tests done, needs 2nd review<
>959 {g} reviewed, deployed <
>827 {g} reviewed, deployment in 2 steps<
>deployed, report from Wytze || {g} <
> {0} || * state 2011-11-27 1. The patch * patch 10.php added 1. PR work * mailing script running/sent 1. "Special case" - handling of 0:0 cases under arbitration * Arbitration case [[Arbitrations/a20111001.1|a20111001.1]] still running * review of [[Support/Handbook/NewPointsCalculation]] instructions for SE's * 3 potential scenarios possible: a. orig email is identical to email addr on CAP form a. orig email is secondary email in account, assuree can set email addr from assurance to primary email a. orig email from assurance is no longer valid, assurer has to contact support * addtl. documentation required * new email addr to write onto assurers cap form, with ticket id, old assurance id, new assurance id * addtl. documentation old id + ticket id to add in locations field 1. Questions from last 10 meetings: * dirk: when will 827 goes to production? * date fixed: 2011-11-27 1. Testers workqueue 1. Translingo [[https://bugs.cacert.org/view.php?id=985|bug #985]] . [[https://translations.cacert.org]] ([[http://translations.cacert.org/]]) (replacement for translingo) . the translingo.cacert.org had been in operation far longer, so I think it is possible that some users migrated to translingo.cacert.org, without telling us. . I would suggest to mass-mail the email addresses of the translation-project leaders in the translingo database, to inform them, and to ask them to speak up if they still need it * last foreign uploads 2008 on about 13 + cacert projects * whohas translingo server console access? * mario * req for console access for michael to contact project leaders, Updates? * Transfer In, Transfer Out problems * Update from new deployment ? * opened for: create an account can now be started * Michael current state: * import and export routine works * script to incorporate updates needs fixed * next: complete language handling needs to be updated * accept lang handler needs fix * FF de, de_de * IE 6 de, 8,9 de_de * working session within last meeting: michael, marcus * infos from meeting 2011-10-18 * pdf code needs rewrite (uni code library, move to external server (outsourcing)) * message cert notification - uses perl code, text source not avail (get bind-text-domain) * current state? * Marcus sent mailing to translators, no response so far, no tests so far (week 3) * Morten NO * Emanuel IT * current state: * create test system accounts dutch@test, espania@test and so on, let users do their tests * Magu, Marcus will give it a try * a couple of testers has started testing and reporting within the last 7 days * results: de, fr, en, pl, es, pl 1. [[https://bugs.cacert.org/view.php?id=894|bug#894]] "Haeckchen bug" - review done, changes needs reviewed again || 3 || Dirk || [[https://bugs.cacert.org/view.php?id=894|bug#894]] assure someone patches (checkbox) || (incl wot.php changes)<
>tested by 2, needs 2nd review, deploy<
>new test round || {0} || ? / u1 / m1 || * review by dirk in session, review ok * current state: * needs testing * Magu, Marcus will pickup the task * one and last test and report done 2011-11-19 (week 4) 1. [[https://bugs.cacert.org/view.php?id=540|bug#540]] No key usage attribute in cacert org certs anymore? * also: [[https://bugs.cacert.org/view.php?id=905|bug#905]] * Policy group discussion - Extended key usage -> [[PolicyDecisions#p20111113|p20111113]] started, extended for 1 week * new related topics * ios5 bug * tested, works and fixes the ios5 bug * [[http://cabforum.org/Baseline_Requirements_Draft_50.pdf|Baseline Requirements]] * quick review doesn't cover any clashes with our proposal * Motion CARRIED with strong consensus * [[http://blog.cacert.org/2011/11/537.html|blog post added]] * next steps: * prepare fixes * testing? * transfer to critical system 1. OCSP server - timeout 10 min too short, 3 days to long, recommendation is 24-48 hours max, verisign: 7 days, startssl: 2d * who has been informed, contacted? * Michael will inform Wytze 1. Build + Document Emergency Patches Path || Build + Document Emergency Patches Path || Andreas, Uli, Wytze || {0} || * [[Software/Assessment/Documentation/EmergencyPatches]] * Documentation written, reviewed by Wytze, Marcus * Michael: reminder for review [[Software/Assessment/Documentation/EmergencyPatches]] * other reviews done ? 1. Michaels workqueue 1. New function to TMS - edit notary table record * [[https://bugs.cacert.org/view.php?id=980|bug #980]] * infos from last meeting * testers needs editing individual notary records: fields "method", "awarded", "points" * easier to create notary records with testserver (add F2F), and edit existing record, doesn't need to check for assurer-from, assuree-to and so on * Update? * Michael (2011-11-15): after some other bug reviews 1. Dirks workqueue - The List of open / running / unhandled bugs 1. VBscript for Vista/Win7 (select keysize >= 1024) - '''reminder''' to dirk || x^1^ Dirk, new [[https://bugs.cacert.org/view.php?id=964|bug#964]]<
>DEV: [[https://bugs.cacert.org/view.php?id=918|bug#918 (Part II)]] ([[Arbitrations/a20110312.1|a20110312.1]]) Weak keys: /pages/account/.. 4.php, 17.php to combine ? (/includes/keygen.php) '''DEV''' || current state: test /account/4.php added to testserver<
>Marcus will do detailed tests on Wed<
>some references added to [[https://bugs.cacert.org/view.php?id=964|bug#964]] || {-} || * as part of * x^1^ Arbitration case [[Arbitrations/a20110312.1|a20110312.1]] Weak keys [[https://bugs.cacert.org/view.php?id=918|bug #918]] / [[https://bugs.cacert.org/view.php?id=954|bug #954]] / [[https://bugs.cacert.org/view.php?id=964|bug#964]] * Current state: || {g} || pre mailing sent || || {g} || keys revocation script to bulk revoke weak keys, new [[https://bugs.cacert.org/view.php?id=954|bug #954]], finished || || {-} || dirk: DEV: [[Arbitrations/a20110312.1|a20110312.1]] [[https://bugs.cacert.org/view.php?id=918|bug#918]] Weak keys: /pages/account/.. 4.php, 17.php to combine ? (/includes/keygen.php) '''DEV''' <
>vbscript needs to be improved with select box key size and lower limit to 2048 (based on [[https://wiki.mozilla.org/CA:MD5and1024]])<
>Api CertEnroll (MS crypto provider)<
>new [[https://bugs.cacert.org/view.php?id=964|bug#964]]<
>current state: test /account/4.php added to testserver<
>Marcus will do detailed tests on Wed<
>some references added to [[https://bugs.cacert.org/view.php?id=964|bug#964]] || || {g} || Weak keys blog post, published || || {g} || Weak keys article published by Hanno(July 28), link is in CAcert's blog post (July 30) || || {b} || weak keys: problems with cryptostick (to test at [[events/FrOSCon2011|Froscon]] with Juergen ?) || * cert enroll infos under [[https://bugs.cacert.org/view.php?id=964|bug#964]] * vista and win7 works with other engine !CryptoAPI (?) => Cryptography API: Next Generation * [[http://msdn.microsoft.com/en-us/library/aa833130%28v=VS.85%29.aspx]] * Marcus: added notes for Win7 [[https://bugs.cacert.org/view.php?id=964#c2249]] * dirk: has not started the virtual machine * Question from Marcus: did someone contacted illuminat? * No, Marcus: to contact illuminat * illuminat will give it a try, first needs download of testserver image * Update? * marcus: illuminat not yet seen last time * baseline requirement - keyssize >= 2048 to fix till end of 2011 * how to proceed? * dirk: 1st step, to bring win test server localy online * marcus: to contact illuminat 1. Bugs to Review #1, transfer to testserver - Currently '''4''' || uli || [[https://bugs.cacert.org/view.php?id=977|bug #977]] admin console text fix || admin console Sysadmin - find domain - lists 2 tables - one for user accounts, one for org accounts, naming issue || {0} || || uli || [[https://bugs.cacert.org/view.php?id=967|bug #967]] OA isassurer check || Give an OA the oppertuntiy to check if a desiginated Organisation Admininistrator is a CAcert assurer || {0} || || uli || [[https://bugs.cacert.org/view.php?id=859|bug #859]] admin console interface || feature request: show activity on an account in the admin interface, new update /!\ || {0} || || inopiae || [[https://bugs.cacert.org/view.php?id=981|bug #981]] OA overview (dupe of [[https://bugs.cacert.org/view.php?id=943|bug #943]]) || New layout of view for Organisation Administraors in account/id35 || {0} || 1. Bugs under testing: - Currently '''5''' || || neo || [[https://bugs.cacert.org/view.php?id=985|bug #985]] move translingo to translations || check language settings under testserver || {0} || || || || inopiae || [[https://bugs.cacert.org/view.php?id=920|bug #920]] Join - single name only (eg Indonesian) || details under bug number<
>present to Policy Group ? || {0} || || || || uli || [[https://bugs.cacert.org/view.php?id=855|bug #855]] admin console interface "unknown" + "empty" assurance method fields, needed for correct testing on testserver || admin console lists "empty" and "Unknown" assurance types on listing given Assurances || {0} || || || 3 || Dirk || [[https://bugs.cacert.org/view.php?id=894|bug#894]] assure someone patches (checkbox) || (incl wot.php changes)<
>tested by 2, needs 2nd review, deploy<
>new test round || {0} || ? / u1 / m1 || || 7 || uli, ted || [[https://bugs.cacert.org/view.php?id=789|bug #789]] OA edit domain fix || Editing domain for organisations does not work<
>new update 2011-09-26<
>more fixes, more testing<
> * testcase scenario<
> * open org, edit 1st domain in new window, edit 2nd domain in new window<
> * results in: change made in window 2, written to record in window 2<
> * needs cross checking || {0} || ? / u7 / m7|| 1. Needs 2nd review + transfer to Critical team, to bundle, to deploy - Currently '''1''' * define priority eg. 10,2, and so on, proposed order: from 1 to 10 || 8 || Ted, uli || [[https://bugs.cacert.org/view.php?id=957|bug #957]] Resize the comment field on [[https://secure.cacert.org/account.php?id=27]] so more information is visible || last update 2011-08-19<
>tested 3 times<
>ready to deploy? || {0} || ? / u8 / m8 || 1. Needs development, deployment, discussion, reminder 1. [[https://bugs.cacert.org/view.php?id=835|bug #835]] Migrate CATS onto testserver || [[https://bugs.cacert.org/view.php?id=835|bug #835]] Assurer challenge (on testserver) || asssigned to Ted, CATS to install on ca-mgr1, awaiting deployment || {0} || 1. strategy plans ... next: strategy for "New Roots & Escrow" 1. idea: using indirect crl's ? * 2 crl's needed, one valid, one invalid crl server * more infos available ? who ? 1. build testserver with special certs 1. Magu, Michael to send instructions for test deployment * indirect CRL: RFC 5280 [[http://tools.ietf.org/html/rfc5280]] (chapter 5) * meetings ago we've defined Testing requirements and a potential testszenario * to remind every meeting * Michael: testserver environment deployment * Michael will review after Certs extension policy group vote 1. policy group: define requirements * multimember escrow method ? * needs risk analyze * potential candidates ? * Marcus to contacted Benedikt, will contact Thomas K * Next step(s) 1. CI (Update) 1. [[http://live.eclipse.org/node/1031|description to eclipse testpage]], [[http://adobedev.adobe.acrobat.com/p4101brizwr/|Webinar]] * deployment scenario: 1. create testusers 1. testing 1. delete testusers * regression test for standard tests: eg 0,1,49,50,51,99,100,101 pts w/ and w/o CATS passed * reminder 1. Jubula Test-Tool (by Michael) - update? * [[http://www.eclipse.org/jubula/download.php]] * instructions see under [[Software/Assessment/20110830-S-A-MiniTOP#Minutes|Minutes meeting 2011-08-30]] * test deployment needs to be continued by software testers * Jubula documentation started: [[Software/Jubula]] 1. new proposal by Sven: Webdriver with Maven and Jenkins-CI 1. Jubula vs. Webdriver 1. testserver variants 1. testserver for manual tests 1. testserver of OS and application upgrades 1. testserver for CI 1. test methods 1. unit test * test single modules, exceptions 1. integration tests * test interaction of modules 1. system tests * complete system test, with database interactions, module interactions and much more 1. sven did some work regarding frontendtest (Webdriver with Maven and Jenkins-CI) * Michael did some review: probably needs some seperation 1. Infrastructure seperation * contacting secure-u, oophaga started? * Frank, Mario, Ted, Uli, Sebastian ? 1. next meeting: Tuesday, December 6, 2011 22:00 == Minutes == 1. Several discussions regarding mailing * increased support tickets, disputes * mailing state: 146.000 Tue 15:00 * about 2800 mails/hour * returns: approx 4% 1. [[https://bugs.cacert.org/view.php?id=894|bug#894]] "Haeckchen bug" - review done, changes needs reviewed again || 3 || Dirk || [[https://bugs.cacert.org/view.php?id=894|bug#894]] assure someone patches (checkbox) || (incl wot.php changes)<
>tested by 2, needs 2nd review, deploy<
>new test round || {0} || ? / u1 / m1 || * review by dirk in session, review ok * current state: * needs testing * Magu, Marcus will pickup the task * one and last test and report done 2011-11-19 (week 4) * running arbitration [[Arbitrations/a20111001.1|a20111001.1]] prob * checkbox on AP, "Haeckchen bug" helps to pass the "old" assurance * alternates: adding comment field if checkbox is not set * current patch: check on AP to disable * patch transfered to cacert-devel * first test: first two checkboxes set, ok * pojam case potential problem * < 18 years -> 10 pts, < 14 years -> 0 pts * 2011-11-01 -> 10.php: 0 pts, 15.php -> 10 pts * 14 years limit started with pojam, limit given by pojam reached, issue upto 10 pts || 0 checkbox || error missing checks || || only 1st checkbox || error missing checks || || only 2nd checkbox || error missing checks || || 1+2 set || ok || || 1+2+3 set || ok || 1. Marcus: working session [[https://bugs.cacert.org/view.php?id=794|bug#794]] Display certs in admin console * assigned to michael 1. Marcus: working session [[https://bugs.cacert.org/view.php?id=789|bug#789]] OA field extension * magu to test 1. Marcus: working session [[https://bugs.cacert.org/view.php?id=985|bug#985]] translingo transfer * Michael: needs 2nd review 1. Marcus: working session [[https://bugs.cacert.org/view.php?id=859|bug#859]] Activity on Account * Michael: needs 1st review + transfer to testserver 1. [[https://bugs.cacert.org/view.php?id=976|bug #976]] - database restructure preperation * current state summary: * transfered to critical system, patch has been applied * database upgrade, scheduled for Wed Nov 23rd, successfully finished * downtime was about 5 min * cacert user has all permissions * Michael: proposal to limit permissions, eg remove, drop, index, references * magu: problem, can we expect that all works as before? * uli: if there are permission problems, this will be logged and logs the source 1. [[https://bugs.cacert.org/view.php?id=827|bug #827]] - New Points calculation / Thawte patch 1. The patch || Dirk, Michael || [[https://bugs.cacert.org/view.php?id=827|bug #827]] and [[https://bugs.cacert.org/view.php?id=959|bug #959]] Thawte patch/Points-Count-Order-Change project || related bug 959: needs 1 more test, needs 2nd review / 2nd review: also check -x / tests done, needs 2nd review<
>959 {g} reviewed, deployed <
>827 {g} reviewed, deployment in 2 steps<
>deployed, report from Wytze || {g} <
> {g} || * mailing is running * arbitration picked up 1. Questions from last 10 meetings: * dirk: when will 827 goes to production? * date fixed: 2011-11-27 1. bug#827 + bug#882 to merge * close bug#882 * wot.inc.php + notary.inc.php to merge * continue with bug#827 * pojam bug to fix 1. [[https://bugs.cacert.org/view.php?id=540|bug#540]] No key usage attribute in cacert org certs anymore? * also: [[https://bugs.cacert.org/view.php?id=905|bug#905]] * Policy group discussion - Extended key usage -> [[PolicyDecisions#p20111113|p20111113]] started, extended for 1 week * new related topics * ios5 bug * tested, works and fixes the ios5 bug * [[http://cabforum.org/Baseline_Requirements_Draft_50.pdf|Baseline Requirements]] * quick review doesn't cover any clashes with our proposal * Motion CARRIED with strong consensus * [[http://blog.cacert.org/2011/11/537.html|blog post added]] * next steps: * prepare fixes -> Michael to prepare diffs, against svn * sending to testserver * transfer to critical system 1. OCSP server - timeout 10 min too short, 3 days to long, recommendation is 24-48 hours max, verisign: 7 days, startssl: 2d * who has been informed, contacted? * Michael will inform Wytze * not yet written * thread relates to [[https://lists.cacert.org/wws/arc/cacert-board/2011-11/msg00021.html]] 1. Build + Document Emergency Patches Path || Build + Document Emergency Patches Path || Andreas, Uli, Wytze || {0} || * [[Software/Assessment/Documentation/EmergencyPatches]] * Documentation written, reviewed by Wytze, Marcus * Michael: reminder for review [[Software/Assessment/Documentation/EmergencyPatches]] * not yet done 1. Infrastructure seperation * contacting secure-u, oophaga started? * Frank, Mario, Ted, Uli, Sebastian ? * not yet contacted 1. next meeting: Tuesday, December 6, 2011 22:00 * dirk at 13th away ==== Fixed Action Items since last or within meeting ==== || Done: Dirk, Michael, Michael<
>!ToDo: Ted || [[https://bugs.cacert.org/view.php?id=827|bug #827]] and [[https://bugs.cacert.org/view.php?id=959|bug #959]] Thawte patch/Points-Count-Order-Change project<
>15.php, users view || related bug 959 {g} reviewed, deployed <
>827 {g} reviewed, deployment in 2 steps: 15.php, 10.php<
>deployed, new problem, needs fixing<
>one fix 2011-10-18 doesnt solve the problem<
>needs more fixing<
>2011-10-25: fixed, tested<
>10.php updated, mailing sent || 1 {g} <
> {g} || || dirk || [[https://bugs.cacert.org/view.php?id=882|bug #882]] Thawte patch/Points-Count-Order-Change project<
>43.php, admin console view || display Assurance when field in list of assurances received, assurances given by a user in admin console interface<
>last update 2011-10-25<
>fixed, tested || 2 {g} || || michael || [[https://bugs.cacert.org/view.php?id=976|bug #976]] || List of update request for webdb database structure upgrade with tables / fields<
>next: script deployment, instructions for critical team<
>testing notary and org tables<
>awaits transfer to critical team<
>reviewed 2 times<
>at least one more test || {g} <
> {g} || || uli, Ted || [[https://bugs.cacert.org/view.php?id=965|bug #965]] 0000965: Outsource / fix Webdb text pages id=12, 13 || addtl. id=37, id=38, new update 2011-09-25<
>3 tests, needs 2nd review, deploy || 8 {g} || ---- ==== Action Items New ==== Action items: '''[[Software/Assessment/ActionItems|Meeting Action Items]]''' <> ---- . CategorySoftwareAssessment