70 likes | 235 Views
Heikki Toivonen Open Source Applications Foundation. PKI in Chandler. What is OSAF?. Founded by Mitch Kapor (founder of Lotus Development Company etc.) to bring his vision about a better Personal Information Manager a reality Based in San Francisco, CA Currently has about 20 employees
E N D
Heikki Toivonen Open Source Applications Foundation PKI in Chandler
What is OSAF? • Founded by Mitch Kapor (founder of Lotus Development Company etc.) to bring his vision about a better Personal Information Manager a reality • Based in San Francisco, CA • Currently has about 20 employees • Non-profit
What is Chandler? • Personal Information Manager • Email, calendar, tasks, notes, instant messaging, ... • Open Source, cross platform, written in Python • P2P sharing plus more traditional models – all sharing encrypted • Canoga release next year targeted for small groups and individuals • Westwood release for higher ed. follows
PKI in Chandler • Users establish sharing network by exchanging X.509 certificates • Either established CA created certs, or Chandler created certs • Users can verify certificate fingerprints out-of-band to mark them trusted for sharing, or implicitly trust all or all signed from certain CAs • All sharing encrypted and signed • Also SSL for IMAP ect.; S/MIME
Implementation Details • OpenSSL • M2Crypto (Python wrapper for OpenSSL) • Extended M2Crypto to enable certificate creation etc. • EGADS with PyEGADS entropy service? • PyEGADS created at OSAF • Add M2Crypto to Twisted – work-in-progress • Application logic in Chandler itself
References • Heikki Toivonen (heikki@osafoundation.org) • http://www.osafoundation.org • http://wiki.osafoundation.org/twiki/bin/view/Chandler/SecurityFramework