eduroam Development VC Minutes 2019-12-10 1530 CET

Attendance

Attendees

  • Stefan Winter (RESTENA)
  • Tomasz Wolniewicz (PSNC/UMK)
  • Maja Gorecka-Wolniewicz (PSNC/UMK)
  • Miroslav Milinovic (SRCE)
  • Janos Mohacsi (KIFU)
  • Zbigniew Oltuszyk (PSNC)
  • Dariusz Janny (PSNC)

Apologies

  • Zenon Mousmoulas (GRNET)

Agenda / Proceedings

  1. Welcome / Agenda Bashing
  2. eduroam CAT and Linux installers
    • suggestion from a German user to use the NetworkManager CLI (with bash) instead of D-BUS (with Python)
    • development is happening in a separate device module, able to switch dynamically
    • current state: it runs, probably rather close to completion
    • could be rolled into 2.0.4 (date flexible)
  3. Progress on eduPKI CA certificates with automated API
    • demo of the prototype
      • Takes CSR, replaces C, O, CN with dummy values (in future, found in eduroam DB)
      • adds dummy person and mail (in future, taken from eduroam DB)
      • sends request to eduPKI Test CA
      • picks up issued certificate after approx. 3 minutes
    • CSR needs to have three specific “DC” components
    • generated with openssl like this:
      openssl req -new -newkey rsa:4096 -out test.csr -keyout test.key -subj /DC=test/DC=test/DC=eduroam/C=XY/O=WillBeReplaced/CN=will.be.replaced
    • is the hostname going to be checked by actual RADIUS server implementations? If it is, make everyone aware - not currently mandated by the policy…
    • One certificate with all hostnames, or should admin be able to select a subset?
  4. DjNRO
    • Can this be brought into the GEANT project? In principle yes, but precendent exists where it was and development did not take off anyway.
    • If there is a good agreement and active interest by sufficient count of NROs, can go for another try.
    • Ideally, gather community first and make a proposal.
  5. AOB / Next VC
    skip two, then as per schedule, 21 jan 2020, 1530 CET
  • No labels