Hi Sam,
I'm cc'ing this to tb-support in case others are interested.
The SARoNGS RPM is available here:
http://cert.ca.ngs.ac.uk/ukescience-1-1
It is not officially out yet - and will change - because it needs to be signed with the GPG key (as advertised) and I haven't signed it until I have located the missing Earth Science CA. Main news is that we have decoupled the "SLCSTopLevel" CA which signs CAs that sign short-lived credentials, so it is now a standalone CA, so it is independent of the IGTF release. I guess John mentioned that this morning?
It also hasn't been tested quite as carefully as we'd like... so treat it with some caution. But the main advantage is that it installs entirely in parallel with IGTF - which is tantamount to saying we have given up trying to get SARoNGS into IGTF for now - but at least people can install it without any known risk to their existing CA certificate setup.
Feedback & comments welcome. And questions.
Cheers
--jens
________________________________
From: Sam Skipsey [[log in to unmask]]
Sent: 01 February 2012 11:48
To: Jensen, Jens (STFC,RAL,ESC)
Subject: SARoNGS etc
Hi Jens,
I was at the SARoNGS/Shibboleth presentation and John Kewley mentioned the existence of a SARoNGS cert RPM that can be installed side-by-side with the IGTF trust anchors.
I get the impression it isn't at public release yet, but I was wondering if we could get a hold of it...
Sam
|