X.509v3 support for SunSSH design document

I've been working for the past few weeks on a project that should provide X.509 support for server authentication and user public key authentication to SunSSH. At present, I've finished the design document and I also have a prototype version that doesn't have all the requested functionality but works well enough to confirm that it can be implemented according to the current design.

I'm going to send it today to security-discuss mailing list on opensolaris.org. I would be happy to discuss the design there.

RFE for this feature is 6357779 SSHv2 x.509 support desired and here is the X.509v3 support for SunSSH design document.

Comments:

Very nice to see progress on this RFE.

Posted by Mads on February 18, 2008 at 12:53 PM CET #

this summer we have got a opportunity to work at sun bangalore and we want to carry this forward. Also we want to know to what extent SunSSH supports ECC. Is there any open area that we can work on.....

Posted by Deepak Sahu on March 27, 2008 at 09:40 AM CET #

Deepak, I'll try to put the prototype code on opensolaris.org but I can't promise when that is going to happen. When I do it, I'll post a short message on my blog.

wrt ECC, there is a draft, draft-green-secsh-ecc-02. So far, we don't plan to implement it within a near future but if you are serious about working on it I suggest to use security-discuss@opensolaris.org to find out what the community thinks about it.

Posted by Jan on March 27, 2008 at 09:57 AM CET #

Well hi
Me and Deepak are team mates on this project.Could you give a few more details of the discussions you have had on the security discuss mailing list on X.509 support for server authentication and user public key authentication to SunSSH. Do you think admirable progress is a possibility in this area in a time frame of 2 months? Because a lot of our efforts are into this project and we wouldnt like to get stuck too. What is your advice in this regard??

Posted by Prabit on March 30, 2008 at 04:50 AM CEST #

Prabit, I sent the design document to security-discuss on opensolaris.org in February but there was no discussion. I'm occupied with another project now but if you want to speed it up and have any suggestion regarding the draft, please initiate a discussion on the security alias mentioned above. There are some open issues mentioned in the document, needed to be resolved.

Posted by Jan on March 30, 2008 at 09:52 AM CEST #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Jan Pechanec

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today