[Pki-devel] Review Request: Token Management System ECC infrastructure

Christina Fu cfu at redhat.com
Wed Sep 12 01:19:16 UTC 2012


https://fedorahosted.org/pki/attachment/ticket/304/TPS-ECC.patch2

This patch provides TMS ECC infrastructure as described in task #304: 
https://fedorahosted.org/pki/ticket/304

I have merged/sanitized the code from two sources:
* Token ECC enrollment with client-side key generation support (provided 
by jmagne at redhat.com)
* TMS ECC enrollment with server-side key generation and key archival 
support (provided by myself - cfu at redhat.com)

The following tests have been conducted:
* ECC enrollment via tpsclient
* RSA enrollment via tpsclient
* RSA server-side key generation via tpsclient
* ECC server-side key generation via tpsclient
* ECC enrollment via smart card token (Safenet 330j)
* RSA enrollment via smart card token (Safenet sc650)

note 1: For ECC enrollments, you will need a newer java applet, which is 
not yet ready for checkin.

note 2: server-side key generation is currently not yet supported by the 
smart card token because of the lack of the key injection code, which 
will be covered by task #235 (https://fedorahosted.org/pki/ticket/235)

thanks,
Christina






More information about the Pki-devel mailing list