Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Message-ID: <13577644.1161110196693.JavaMail.jira@brutus>
Date: Tue, 17 Oct 2006 11:36:36 -0700 (PDT)
From: "Vamsavardhana Reddy (JIRA)" <dev@geronimo.apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Commented: (GERONIMO-2413) Add a Certification Authority
 (CA) portlet to Geronimo console
In-Reply-To: <20761258.1158635542272.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

    [ http://issues.apache.org/jira/browse/GERONIMO-2413?page=comments#action_12443025 ] 
            
Vamsavardhana Reddy commented on GERONIMO-2413:
-----------------------------------------------

How do you remove/edit CA info once configured?

During the setup, CA (let me call it Geronimo CA) uses a self-signed certificate.  If Geronimo CA decides to get certified by another CA, Geronimo CA can import its certificate into 'ca-keystore' using the keystore portlet.  If Geronimo CA's certificate changes, it should be published again using the "Publish CA Certificate" link in CA Portlet.


> Add a Certification Authority (CA) portlet to Geronimo console
> --------------------------------------------------------------
>
>                 Key: GERONIMO-2413
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-2413
>             Project: Geronimo
>          Issue Type: New Feature
>      Security Level: public(Regular issues) 
>          Components: console, security
>            Reporter: Vamsavardhana Reddy
>             Fix For: 1.2, 1.x
>
>         Attachments: 02.ca-initialization-enter-details.JPG, 07.issue-certificate-show-csr-details.JPG, 09.issue-certificate-successful.JPG, GERONIMO-2413-revised.patch, GERONIMO-2413-v1.2.patch, GERONIMO-2413.patch, GeronimoCA.zip
>
>
> A Certification Authority portlet will be very useful.  A full fledged CA may be a long way to go.  But what ever minimum function is required to process CSR's etc. is not hard and the users can issue their own digital certificates instead of getting trial certificates from some CA. 

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira