Re: [Zope] new proposal with Verisign CA (was radius authenticati on instead of flatfile or userdb?) flatfile or userdb?)
Yeah, you may be able to get stronghold, or something, to do the client-side certificate auth. Hey, didn't Chris Petrilli work with this stuff?
Yep. We've now got the expertise, we've just not had the opportunity to get into it. The customer driving our LDAP work will, in the next 3-4 months, also be driving an x509 requirement. When we do get to it I _strongly_ suspect that we'll defer as much as possible to the web server (in their case Netscape ES).
Ach! I've been found out :-) Yes, I've thought very hard about how to do this correctly, and it's not "hard", but it is tedious to get right. I spent too long on the wrong end of PKI (i.e. the infrastructure side) and have seen the pains of actually trying to use all this nifty technology. As soon as we have a customer requirement that drives it, we'll venture down there, unfortunately that also requires getting some legal opinions as to whether the piece we're doing is subject to export control. I don't *think* so, but, I'm not a lawyer. In the next few days (this weekend maybe?) I'll try and pretty up my little writings on how PKI and Zope could work together if anyone's interested. Chris -- | Christopher Petrilli Python Powered Digital Creations, Inc. | petrilli@digicool.com http://www.digicool.com
On Fri, Sep 10, 1999 at 10:03:32AM -0400, Christopher Petrilli wrote:
so, but, I'm not a lawyer. In the next few days (this weekend maybe?) I'll try and pretty up my little writings on how PKI and Zope could work together if anyone's interested.
Very cool, but Chris, didn't you promise the list a DA Writer's Guide? I've been busy myself with other tasks, but I'd like to get the ZPyGreSQLDA completely up to snuff, as it were, and some docs would speed the process immensely. Hmm, where is that email... Ah, here it is: On July 29th, 1999, Christopher Petrilli wrote:
Also, any progress on the "Database Adapters Author's Guide" mentioned on the Database Adapters page?
Wow, never knew anyone had offered such a beast. :-) I will talk to our documentation person (Pam) about getting it at least listed, as it is a good idea, but I wouldn't recommend holding your breath! :-)
Chris
So, no, Chris didn't promise it, whoever put it on the Download page for DA's did. Is Chris the obvious choice for writing this, since he did the Roadmap, because it _would_ be very useful. I assume the 'don't hold your breath' was because this quote was before the big 2.0 release. Just a little friendly prodding... ;-) Ross -- Ross J. Reedstrom, Ph.D., <reedstrm@rice.edu> NSBRI Research Scientist/Programmer Computer and Information Technology Institute Rice University, 6100 S. Main St., Houston, TX 77005
participants (2)
-
Christopher Petrilli -
Ross J. Reedstrom