November 2011 - security-devroom

[security-devroom] [Talk/Demo Submission] Dogtag Certificate System (open source PKI)
by Kashyap Chamarthy 04 Feb '12

04 Feb '12

Heya, Here is my talk/demo submission for "Hardware Security and Cryptography" room at Fosdem. I also added it to the below wiki (I'd prefer to do a demo if time permits) http://www.opensc-project.org/opensc/wiki/FOSDEM2012 Abstract for 'Dogtag Certificate System': -------------------------------------------------- This talk gives a brief overview of Dogtag Certificate System, an open-source and open-standards based scalable PKI(public-key infrastructure) solution. It lets you manage digital certificate life cycle -- common operations like certificate issuance, revocation, retrieval, renewal, manage Certificate Revocation Lists, certificate status checking using OCSP, key archival/recovery. The talk also provides a deployment overview of different configurable subsystems like CA(Certificate Authority) -- this is the core part of certificate system which handles basic certificate management operations. Other subsystems include DRM(data recovery manager) -- which is used for 'key' archival and recovery; OCSP(online certificate status protocol) -- for checking whether a certificate is valid. RA(Registration Authority) -- for locally generating and submitting certificate requests(and validate them) effectively reducing load on CA. There are couple of other subsystems for token management (TKS/TPS) Demonstration: ------------------- If possible, I'd also prefer to show a quick demo of configuring different subsystems like CA, KRA(Key Recovery Archival), OCSP, RA(Registration Authority) using virtual machines on my laptop with the current upstream dogtag pki . This would hopefully be useful for sys. admins trying to deploy an enterprise class PKI. (I'd be using some test scripts[2], but, I may use slightly updated scripts at that time of demo.) Affiliation/Bio: ---------------- I'm Kashyap Chamarthy, a test engineer at Red Hat. I help test open source Identity and Security(PKI) technologies[2][3]. I also test and deploy a lot of upstream Linux(KVM based) virtualization as part of my lab infrastructure. Looking ahead to learn some finer details about open-source crypto at FOSDEM and meet some cool folks. [1] http://kashyapc.fedorapeople.org/dogtag-pki/ [2] http://pki.fedoraproject.org [3] http://freeipa.org

4 5

[security-devroom] Talk and workshop: Deployment and Use of X.509 in Free Software Components
by Бранко Мајић 08 Nov '11

08 Nov '11

Hello, I'd like to submit a proposal for a talk and maybe a workshop if resources permit. Contact ======= Name: Branko Majic E-mail: From mail header Biography ========= I'm a system integration engineer/system administrator, Free Software enthusiast and supporter. I've been dealing with deployment of various Free Software solutions (integrating them often with proprietary solutions), and for the past two years I've dealt a lot with security-related technologies (mainly X.509, some Kerberos, and integration/installation of different solutions with those). Talk Info ============ Duration: Depending on topics I'd cover, 30-40 minutes The talk will cover the use of X.509 in available Free Software applications, the obstacles that integrators are bound to face, and the way the integration process might be improved. The talk should also cover some areas which are currently lacking in terms of implementation in Free Software projects. The talk is more oriented towards the system administrators/integrators. Workshop Info ============= The workshop should include a practical demonstration of deployment of X.509 infrastructure, integration of various services to use X.509 certificates and infrastructure, with demos provided with virtual machines. Purpose is to demonstrate the functionality in Free Software related to X.509, primarily in terms of enterprise-readiness of such software. Additional Information ====================== The talk and workshop will be heavily based on an online book I'm working on which can be found here: http://majic.rs/book/free-software-x509-cookbook I might have some trouble with the virtual environment, though, since I don't have a sufficiently powerful laptop to have it running. If anyone has ideas or could donate a machine with enough CPU power/RAM for the duration of workshop, I'd be very grateful :) -- Branko Majic Jabber: branko(a)majic.rs Please use only Free formats when sending attachments to me. Бранко Мајић Џабер: branko(a)majic.rs Молим вас да додатке шаљете искључиво у слободним форматима.

1 0

[security-devroom] OpenSC @ FOSDEM 2012 & resurrection of security-devroom list
by Martin Paljak 01 Nov '11

01 Nov '11

Hello, 1. I filed for a security devroom again, I hope it will be accepted (hey, they even resurrected the mailing list). The theme of the devroom is "(hardware) security / crypto" 2. The scheme is the same as last year, except there should be a (different) room for two days, where the second day will be pure hands on hacking. I plan to bring a bunch of different hardware and I hope to see many people from different projects and hopefully we can even have a short hackathon there. 3. Please distribute at relevant lists/forums/groups links - to the mailing list at [1] - to the wiki [2] 4. If you have a talk proposal, please send a short description of it to the same list or add it to the currently empty wiki page [2] following basically the same CFP as last year [3]. Also, feel free to voice your interests either on the list or in the wiki. For example, I'm personally interested in hearing something about CESECORE [4] and Android(/smart cards, like [5]), hopefully this helps to send the word around that we actually could see people associated with such efforts. Best, Martin [1] https://lists.fosdem.org/mailman/listinfo/security-devroom [2] http://www.opensc-project.org/opensc/wiki/FOSDEM2012 [3] https://www.opensc-project.org/opensc/wiki/FOSDEM2011/CFP [4] https://www.cesecore.eu/ [5] http://code.google.com/p/seek-for-android/ -- @MartinPaljak +3725156495

2 1