<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Well, the PKI pieces are the same regardless of the CA and
    certificate issuing pieces.  All we will need to do is to use a
    signing key to sign a document.  So EJBCA or Dogtag will work
    equally as well.  If people already have a CA infrastructure, they
    should be able to leverage that, too.<br>
    <br>
    <br>
    On 05/15/2012 04:47 PM, Thor Wolpert wrote:
    <blockquote
cite="mid:CABphSybFO0N+_ordq1-1Ov0KpMpuv59aCNemw7KB2=qsx6XiZg@mail.gmail.com"
      type="cite">If you're open to levarging other OSS projects, <a
        moz-do-not-send="true"
        href="http://www.ejbca.org/architecture.html">http://www.ejbca.org/architecture.html</a>
      us a great one to look at, assuming you need a PKI implementation
      available.
      <div>
        <br>
      </div>
      <div>I believe it is at least worth a look.<br>
        <br>
        <div class="gmail_quote">On Tue, May 15, 2012 at 1:30 PM,
          Razique Mahroua <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:razique.mahroua@gmail.com" target="_blank">razique.mahroua@gmail.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div style="font-family:Lucida Grande;font-size:11pt"
              bgcolor="#FFFFFF" text="#000000">
              <div style="font-size:11pt;font-family:Lucida Grande"><span
                  style="font-family:Lucida Grande">great topic :)<br>
                  <br>
                </span><br>
                <blockquote style="border:0px none" type="cite">
                  <div style="margin:30px 25px 10px 25px">
                    <div style="display:table;width:100%;border-top:1px
                      solid #edeef0;padding-top:5px">
                      <div
                        style="display:table-cell;vertical-align:middle;padding-right:6px"><img
                          moz-do-not-send="true"
                          name="137523c10e7871b5_postbox-contact.jpg"
                          height="25px" width="25px"></div>
                      <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
                        <a moz-do-not-send="true"
                          href="mailto:heckj@mac.com"
style="color:#737f92!important;padding-right:6px;font-weight:bold;text-decoration:none!important"
                          target="_blank">Joseph Heck</a></div>
                      <div
                        style="display:table-cell;white-space:nowrap;vertical-align:middle">
                        <font color="#9FA2A5"><span
                            style="padding-left:6px">15 mai 2012 21:06</span></font></div>
                    </div>
                  </div>
                  <div
                    style="color:#888888;margin-left:24px;margin-right:24px">
                    <div>Coming out of the Keystone meeting from today (<a
                        moz-do-not-send="true"
href="http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-15-18.02.html"
                        target="_blank">http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-15-18.02.html</a>),

                      I thought it worth mentioning that adam young has
                      been doing some tremendous lifting in terms of
                      looking at adding in PKI support to Keystone. The
                      writeup and details are on the OpenStack wiki at <a
                        moz-do-not-send="true"
                        href="http://wiki.openstack.org/PKI"
                        target="_blank">http://wiki.openstack.org/PKI</a><br>
                      <br>
                      I rather suspect there's a lot of interest in this
                      topic, so I wanted to make sure the broader
                      community knew about the effort, what we were
                      thinking, and were we are. <br>
                      <br>
                      If you're interested in discussing, the keystone
                      meeting is on Tuesday mornings at 18:00 UTC<br>
                      <br>
                      -joe<br>
                      <br>
                      _______________________________________________<br>
                      Mailing list: <a moz-do-not-send="true"
                        href="https://launchpad.net/%7Eopenstack"
                        target="_blank">https://launchpad.net/~openstack</a><br>
                      Post to : <a moz-do-not-send="true"
                        href="mailto:openstack@lists.launchpad.net"
                        target="_blank">openstack@lists.launchpad.net</a><br>
                      Unsubscribe : <a moz-do-not-send="true"
                        href="https://launchpad.net/%7Eopenstack"
                        target="_blank">https://launchpad.net/~openstack</a><br>
                      More help : <a moz-do-not-send="true"
                        href="https://help.launchpad.net/ListHelp"
                        target="_blank">https://help.launchpad.net/ListHelp</a><span
                        class="HOEnZb"><font color="#888888"><br>
                        </font></span></div>
                  </div>
                </blockquote>
                <span class="HOEnZb"><font color="#888888"><br>
                    <div>-- <br>
                      <span><span style="font-family:Lucida Grande">Nuage
                          & Co - Razique Mahroua <br>
                          <span style="font-weight:bold"><a
                              moz-do-not-send="true"
                              href="mailto:razique.mahroua@gmail.com"
                              target="_blank">razique.mahroua@gmail.com</a></span></span><span
                          style="color:rgb(51,153,153)"></span><span
                          style="font-family:monospace"></span></span><br>
                      <br>
                      <div><span style="font-family:monospace">
                        </span><img moz-do-not-send="true"
                          name="137523c10e7871b5_image.jpg" alt=""></div>
                       
                      <br>
                      <br>
                    </div>
                  </font></span></div>
            </div>
            <br>
            _______________________________________________<br>
            Mailing list: <a moz-do-not-send="true"
              href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
            Post to     : <a moz-do-not-send="true"
              href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
            Unsubscribe : <a moz-do-not-send="true"
              href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
            More help   : <a moz-do-not-send="true"
              href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
Post to     : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
More help   : <a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>