You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by "Brian Eaton (JIRA)" <ji...@apache.org> on 2008/02/23 03:17:19 UTC

[jira] Created: (SHINDIG-92) Crypto utility functions for gadget server

Crypto utility functions for gadget server
------------------------------------------

                 Key: SHINDIG-92
                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
             Project: Shindig
          Issue Type: Improvement
          Components: Gadgets Server - Java
            Reporter: Brian Eaton
            Assignee: John Hjelmstad
         Attachments: crypto.patch

Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by "Kevin Brown (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kevin Brown updated SHINDIG-92:
-------------------------------

    Assignee: Kevin Brown  (was: John Hjelmstad)

Not quite ready to commit this yet, but we're still planning on doing so once we have code ready to consume it. I'll revisit this one after I'm done with my refactoring work (sometime later this week / early next week)

> Crypto utility functions for gadget server
> ------------------------------------------
>
>                 Key: SHINDIG-92
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Gadgets Server - Java
>            Reporter: Brian Eaton
>            Assignee: Kevin Brown
>         Attachments: crypto.patch
>
>
> Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Re: [jira] Resolved: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
On Fri, Mar 14, 2008 at 1:51 AM, Santiago Gala <sa...@gmail.com> wrote:
>  If you read the document, the problems with encryption is not really
>  big, it is just a matter of filling a couple forms and listing the
>  components and the project somewhere. So there is no real need to remove
>  the code if someone walks through the form and understands (or ask
>  elsewhere) how to fill it.

Good to hear, thanks.

I'll take a look at the forms and process today.  I'm not a comitter,
but hopefully I can advise on how to fill them out.

Re: [jira] Resolved: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
El jue, 13-03-2008 a las 16:14 -0700, Brian Eaton escribió:
> I agree, we definitely need to look at this more closely.  I've
> attached a new patch to SHINDIG-92 that removes the encryption
> functions from the code.  Can someone please apply that patch so we
> can go back and do this the right way?
> 
> My understanding is that the authentication functions in the code are
> less likely to cause export problems.  I've left those in.  If someone
> believes otherwise, I can help remove them as well.
> 

If you read the document, the problems with encryption is not really
big, it is just a matter of filling a couple forms and listing the
components and the project somewhere. So there is no real need to remove
the code if someone walks through the form and understands (or ask
elsewhere) how to fill it.

I hoped someone else in the group had already done that forms for a
different project and might do it faster than any of us. :)

Regards
Santiago

> Cheers,
> Brian
> 
> On Thu, Mar 13, 2008 at 1:00 PM, Santiago Gala <sa...@gmail.com> wrote:
> > I think this commit is the point where we might hit
> >  http://www.apache.org/dev/crypto.html
> >
> >  I'm not sure as I am feeling quite sick right now, and not like trying
> >  to understand either the crypto faq or the whole scope of the code, but
> >  someone should start taking a look into it.
> >
> >  Regards
> >  Santiago
> >
> >
> >  El mar, 11-03-2008 a las 03:44 -0700, Paul Lindner (JIRA) escribió:
> >
> >
> > > [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
> >  >
> >  > Paul Lindner resolved SHINDIG-92.
> >  > ---------------------------------
> >  >
> >  >     Resolution: Fixed
> >  >
> >  > Patch committed
> >  >
> >  >
> >  > > Crypto utility functions for gadget server
> >  > > ------------------------------------------
> >  > >
> >  > >                 Key: SHINDIG-92
> >  > >                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
> >  > >             Project: Shindig
> >  > >          Issue Type: Improvement
> >  > >          Components: Gadgets Server - Java
> >  > >            Reporter: Brian Eaton
> >  > >            Assignee: Kevin Brown
> >  > >         Attachments: crypto.patch
> >  > >
> >  > >
> >  > > Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.
> >  >
> >  --
> >  Santiago Gala
> >  http://memojo.com/~sgala/blog/
> >
> >
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


Re: [jira] Resolved: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
I agree, we definitely need to look at this more closely.  I've
attached a new patch to SHINDIG-92 that removes the encryption
functions from the code.  Can someone please apply that patch so we
can go back and do this the right way?

My understanding is that the authentication functions in the code are
less likely to cause export problems.  I've left those in.  If someone
believes otherwise, I can help remove them as well.

Cheers,
Brian

On Thu, Mar 13, 2008 at 1:00 PM, Santiago Gala <sa...@gmail.com> wrote:
> I think this commit is the point where we might hit
>  http://www.apache.org/dev/crypto.html
>
>  I'm not sure as I am feeling quite sick right now, and not like trying
>  to understand either the crypto faq or the whole scope of the code, but
>  someone should start taking a look into it.
>
>  Regards
>  Santiago
>
>
>  El mar, 11-03-2008 a las 03:44 -0700, Paul Lindner (JIRA) escribió:
>
>
> > [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
>  >
>  > Paul Lindner resolved SHINDIG-92.
>  > ---------------------------------
>  >
>  >     Resolution: Fixed
>  >
>  > Patch committed
>  >
>  >
>  > > Crypto utility functions for gadget server
>  > > ------------------------------------------
>  > >
>  > >                 Key: SHINDIG-92
>  > >                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>  > >             Project: Shindig
>  > >          Issue Type: Improvement
>  > >          Components: Gadgets Server - Java
>  > >            Reporter: Brian Eaton
>  > >            Assignee: Kevin Brown
>  > >         Attachments: crypto.patch
>  > >
>  > >
>  > > Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.
>  >
>  --
>  Santiago Gala
>  http://memojo.com/~sgala/blog/
>
>

Re: [jira] Resolved: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
I think this commit is the point where we might hit
http://www.apache.org/dev/crypto.html

I'm not sure as I am feeling quite sick right now, and not like trying
to understand either the crypto faq or the whole scope of the code, but
someone should start taking a look into it.

Regards
Santiago


El mar, 11-03-2008 a las 03:44 -0700, Paul Lindner (JIRA) escribió:
> [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
> 
> Paul Lindner resolved SHINDIG-92.
> ---------------------------------
> 
>     Resolution: Fixed
> 
> Patch committed
> 
> 
> > Crypto utility functions for gadget server
> > ------------------------------------------
> >
> >                 Key: SHINDIG-92
> >                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
> >             Project: Shindig
> >          Issue Type: Improvement
> >          Components: Gadgets Server - Java
> >            Reporter: Brian Eaton
> >            Assignee: Kevin Brown
> >         Attachments: crypto.patch
> >
> >
> > Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.
> 
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


[jira] Resolved: (SHINDIG-92) Crypto utility functions for gadget server

Posted by "Paul Lindner (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Paul Lindner resolved SHINDIG-92.
---------------------------------

    Resolution: Fixed

Patch committed


> Crypto utility functions for gadget server
> ------------------------------------------
>
>                 Key: SHINDIG-92
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Gadgets Server - Java
>            Reporter: Brian Eaton
>            Assignee: Kevin Brown
>         Attachments: crypto.patch
>
>
> Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by "Brian Eaton (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Eaton updated SHINDIG-92:
-------------------------------

    Attachment: crypto.patch

> Crypto utility functions for gadget server
> ------------------------------------------
>
>                 Key: SHINDIG-92
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Gadgets Server - Java
>            Reporter: Brian Eaton
>            Assignee: John Hjelmstad
>         Attachments: crypto.patch
>
>
> Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
On Fri, Mar 14, 2008 at 11:41 AM, Upayavira <uv...@odoko.co.uk> wrote:
>  Okay, so taking into account that I am (a) lazy and (b) clueless, what
>  is it I am supposed to be doing?

The instructions are here: http://www.apache.org/dev/crypto.html

I've put together some patch files that should help speed things along
(see an earlier e-mail for me, or bug me to resend it), but I'm fairly
clueless about how to actually apply the patch to the exports page.

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Upayavira <uv...@odoko.co.uk>.
On Fri, 2008-03-14 at 11:17 -0700, Dan Peterson wrote:
> On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
> 
> >
> > On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> > > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com>
> > wrote:
> > > >  If encryption is useful, I'd say that we should follow the export
> > > >  procedure and have it done early, rather than back off now and have
> > to
> > > >  fill the forms later. I posted the URI because I have a few days with
> > a
> > > >  lot of work but I didn't want to let it pass through when I spotted
> > it,
> > > >  and crypto audit/assessment has been an active item in several apache
> > > >  lists lately.
> > >
> > > I've done a bit of research into how we follow this process.  To
> > > continue we need
> > >
> > > (a) someone with "site-dev" karma to modify a web page.
> >
> > Er, me, I think.
> >
> > > (b) the Shindig PMC chair to send an e-mail
> >
> > We don't have a chair, so any mentor will do. So, er, me.
> >
> > > Can you help me locate those people?
> >
> > If I recall right, I think I'm sitting right here. Does that help? :-)
> >
> > I wonder how much of that Santiago can do too.
> >
> 
> It sounded like Santiago was sick, so it'd be great if, er, you, could help
> out here. :)

Okay, so taking into account that I am (a) lazy and (b) clueless, what
is it I am supposed to be doing?

Upayavira



Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Dan Peterson <dp...@google.com>.
On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:

>
> On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com>
> wrote:
> > >  If encryption is useful, I'd say that we should follow the export
> > >  procedure and have it done early, rather than back off now and have
> to
> > >  fill the forms later. I posted the URI because I have a few days with
> a
> > >  lot of work but I didn't want to let it pass through when I spotted
> it,
> > >  and crypto audit/assessment has been an active item in several apache
> > >  lists lately.
> >
> > I've done a bit of research into how we follow this process.  To
> > continue we need
> >
> > (a) someone with "site-dev" karma to modify a web page.
>
> Er, me, I think.
>
> > (b) the Shindig PMC chair to send an e-mail
>
> We don't have a chair, so any mentor will do. So, er, me.
>
> > Can you help me locate those people?
>
> If I recall right, I think I'm sitting right here. Does that help? :-)
>
> I wonder how much of that Santiago can do too.
>

It sounded like Santiago was sick, so it'd be great if, er, you, could help
out here. :)

-Dan

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
Thanks Santiago, I'm relieved to have this taken care of.

On Wed, Mar 19, 2008 at 4:14 PM, Santiago Gala <sa...@gmail.com> wrote:
> I have done the whole dance: email, modified xdocs, generate docs +
>  commit the two after checking, and prepared a patch for LICENSE +
>  NOTICE, which I sent for review to legal-discuss@ before committing to
>  subversion:
>  http://github.com/sgala/apache-incubator-shindig/commit/dab981d48140c1292fbf66720c5501859b7c6ae2
>
>
>  It is not clear to me if the mandatory notice that, according to
>  http://www.apache.org/dev/crypto.html#inform must be in the README,
>  should really be in the NOTICE file (being a *mandatory* notice). I'll
>  check and dcommit briefly.
>
>  Regards
>  Santiago
>
>
>
>  El lun, 17-03-2008 a las 04:56 -0700, Brian Eaton escribió:
>
>
> > Ping.
>  >
>  > Santiago, Brian, Upayavira - any luck figuring out how to update the
>  > http://www.apache.org/licenses/exports/ page?  Anything I can do to
>  > help?
>  >
>  > On Fri, Mar 14, 2008 at 2:19 PM, Santiago Gala <sa...@gmail.com> wrote:
>  > >
>  > >  El vie, 14-03-2008 a las 11:33 -0700, Brian Eaton escribió:
>  > >
>  > > > Thanks Upayvira.  I'm attaching three files to this e-mail.
>  > >  >
>  > >  > export.patch: patch to
>  > >  > infrastructure/site/trunk/xdocs/licenses/exports/index.xml
>  > >  >
>  > >  > email.txt: the text of an e-mail you need to send once export.patch is applied
>  > >  >
>  > >  > notice.patch: patch to incubator/shindig/trunk/NOTICE
>  > >  >
>  > >  > I think you may be the only one who can handle the first two files,
>  > >  > but anyone with shindig commit access can do notice.patch.
>  > >  >
>  > >  > After these three files are handled, I think we are done with
>  > >  > http://www.apache.org/dev/crypto.html
>  > >  >
>  > >
>  > >  I have infrastructure permissions (which I think includes the site), but
>  > >  I'd prefer that Upayavira does it if he can. I will probably try
>  > >  tomorrow or Sunday if he cannot. Definitely not today, not really ready
>  > >  for any work that requires concentration.
>  > >
>  > >  I'd rather apply myself the NOTICE patch, as the commit I did is broken
>  > >  and I have half of the changes here. Also dealing with LICENSE.
>  > >
>  > >  Regards
>  > >  Santiago
>  > >
>  > >
>  > >  > Cheers,
>  > >  > Brian
>  > >  >
>  > >  > On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
>  > >  > >
>  > >  > >  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
>  > >  > >  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
>  > >  > >  > >  If encryption is useful, I'd say that we should follow the export
>  > >  > >  > >  procedure and have it done early, rather than back off now and have to
>  > >  > >  > >  fill the forms later. I posted the URI because I have a few days with a
>  > >  > >  > >  lot of work but I didn't want to let it pass through when I spotted it,
>  > >  > >  > >  and crypto audit/assessment has been an active item in several apache
>  > >  > >  > >  lists lately.
>  > >  > >  >
>  > >  > >  > I've done a bit of research into how we follow this process.  To
>  > >  > >  > continue we need
>  > >  > >  >
>  > >  > >  > (a) someone with "site-dev" karma to modify a web page.
>  > >  > >
>  > >  > >  Er, me, I think.
>  > >  > >
>  > >  > >
>  > >  > >  > (b) the Shindig PMC chair to send an e-mail
>  > >  > >
>  > >  > >  We don't have a chair, so any mentor will do. So, er, me.
>  > >  > >
>  > >  > >
>  > >  > >  > Can you help me locate those people?
>  > >  > >
>  > >  > >  If I recall right, I think I'm sitting right here. Does that help? :-)
>  > >  > >
>  > >  > >  I wonder how much of that Santiago can do too.
>  > >  > >
>  > >  > >  Upayavira
>  > >  > >
>  > >  > >
>  > >  > >
>  > >
>  > >
>  > > --
>  > >  Santiago Gala
>  > >  http://memojo.com/~sgala/blog/
>  > >
>  > >
>  --
>
>
> Santiago Gala
>  http://memojo.com/~sgala/blog/
>
>

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
I have done the whole dance: email, modified xdocs, generate docs +
commit the two after checking, and prepared a patch for LICENSE +
NOTICE, which I sent for review to legal-discuss@ before committing to
subversion: 
http://github.com/sgala/apache-incubator-shindig/commit/dab981d48140c1292fbf66720c5501859b7c6ae2


It is not clear to me if the mandatory notice that, according to
http://www.apache.org/dev/crypto.html#inform must be in the README,
should really be in the NOTICE file (being a *mandatory* notice). I'll
check and dcommit briefly.

Regards
Santiago


El lun, 17-03-2008 a las 04:56 -0700, Brian Eaton escribió:
> Ping.
> 
> Santiago, Brian, Upayavira - any luck figuring out how to update the
> http://www.apache.org/licenses/exports/ page?  Anything I can do to
> help?
> 
> On Fri, Mar 14, 2008 at 2:19 PM, Santiago Gala <sa...@gmail.com> wrote:
> >
> >  El vie, 14-03-2008 a las 11:33 -0700, Brian Eaton escribió:
> >
> > > Thanks Upayvira.  I'm attaching three files to this e-mail.
> >  >
> >  > export.patch: patch to
> >  > infrastructure/site/trunk/xdocs/licenses/exports/index.xml
> >  >
> >  > email.txt: the text of an e-mail you need to send once export.patch is applied
> >  >
> >  > notice.patch: patch to incubator/shindig/trunk/NOTICE
> >  >
> >  > I think you may be the only one who can handle the first two files,
> >  > but anyone with shindig commit access can do notice.patch.
> >  >
> >  > After these three files are handled, I think we are done with
> >  > http://www.apache.org/dev/crypto.html
> >  >
> >
> >  I have infrastructure permissions (which I think includes the site), but
> >  I'd prefer that Upayavira does it if he can. I will probably try
> >  tomorrow or Sunday if he cannot. Definitely not today, not really ready
> >  for any work that requires concentration.
> >
> >  I'd rather apply myself the NOTICE patch, as the commit I did is broken
> >  and I have half of the changes here. Also dealing with LICENSE.
> >
> >  Regards
> >  Santiago
> >
> >
> >  > Cheers,
> >  > Brian
> >  >
> >  > On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
> >  > >
> >  > >  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> >  > >  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
> >  > >  > >  If encryption is useful, I'd say that we should follow the export
> >  > >  > >  procedure and have it done early, rather than back off now and have to
> >  > >  > >  fill the forms later. I posted the URI because I have a few days with a
> >  > >  > >  lot of work but I didn't want to let it pass through when I spotted it,
> >  > >  > >  and crypto audit/assessment has been an active item in several apache
> >  > >  > >  lists lately.
> >  > >  >
> >  > >  > I've done a bit of research into how we follow this process.  To
> >  > >  > continue we need
> >  > >  >
> >  > >  > (a) someone with "site-dev" karma to modify a web page.
> >  > >
> >  > >  Er, me, I think.
> >  > >
> >  > >
> >  > >  > (b) the Shindig PMC chair to send an e-mail
> >  > >
> >  > >  We don't have a chair, so any mentor will do. So, er, me.
> >  > >
> >  > >
> >  > >  > Can you help me locate those people?
> >  > >
> >  > >  If I recall right, I think I'm sitting right here. Does that help? :-)
> >  > >
> >  > >  I wonder how much of that Santiago can do too.
> >  > >
> >  > >  Upayavira
> >  > >
> >  > >
> >  > >
> >
> >
> > --
> >  Santiago Gala
> >  http://memojo.com/~sgala/blog/
> >
> >
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
El lun, 17-03-2008 a las 04:56 -0700, Brian Eaton escribió:
> Ping.
> 
> Santiago, Brian, Upayavira - any luck figuring out how to update the
> http://www.apache.org/licenses/exports/ page?  Anything I can do to
> help?
> 

Not really, I'm looking into it right now. The NOTICE patch is applied
locally. I'll try to do the rest of the things in the next few hours.

Regards
Santiago

> On Fri, Mar 14, 2008 at 2:19 PM, Santiago Gala <sa...@gmail.com> wrote:
> >
> >  El vie, 14-03-2008 a las 11:33 -0700, Brian Eaton escribió:
> >
> > > Thanks Upayvira.  I'm attaching three files to this e-mail.
> >  >
> >  > export.patch: patch to
> >  > infrastructure/site/trunk/xdocs/licenses/exports/index.xml
> >  >
> >  > email.txt: the text of an e-mail you need to send once export.patch is applied
> >  >
> >  > notice.patch: patch to incubator/shindig/trunk/NOTICE
> >  >
> >  > I think you may be the only one who can handle the first two files,
> >  > but anyone with shindig commit access can do notice.patch.
> >  >
> >  > After these three files are handled, I think we are done with
> >  > http://www.apache.org/dev/crypto.html
> >  >
> >
> >  I have infrastructure permissions (which I think includes the site), but
> >  I'd prefer that Upayavira does it if he can. I will probably try
> >  tomorrow or Sunday if he cannot. Definitely not today, not really ready
> >  for any work that requires concentration.
> >
> >  I'd rather apply myself the NOTICE patch, as the commit I did is broken
> >  and I have half of the changes here. Also dealing with LICENSE.
> >
> >  Regards
> >  Santiago
> >
> >
> >  > Cheers,
> >  > Brian
> >  >
> >  > On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
> >  > >
> >  > >  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> >  > >  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
> >  > >  > >  If encryption is useful, I'd say that we should follow the export
> >  > >  > >  procedure and have it done early, rather than back off now and have to
> >  > >  > >  fill the forms later. I posted the URI because I have a few days with a
> >  > >  > >  lot of work but I didn't want to let it pass through when I spotted it,
> >  > >  > >  and crypto audit/assessment has been an active item in several apache
> >  > >  > >  lists lately.
> >  > >  >
> >  > >  > I've done a bit of research into how we follow this process.  To
> >  > >  > continue we need
> >  > >  >
> >  > >  > (a) someone with "site-dev" karma to modify a web page.
> >  > >
> >  > >  Er, me, I think.
> >  > >
> >  > >
> >  > >  > (b) the Shindig PMC chair to send an e-mail
> >  > >
> >  > >  We don't have a chair, so any mentor will do. So, er, me.
> >  > >
> >  > >
> >  > >  > Can you help me locate those people?
> >  > >
> >  > >  If I recall right, I think I'm sitting right here. Does that help? :-)
> >  > >
> >  > >  I wonder how much of that Santiago can do too.
> >  > >
> >  > >  Upayavira
> >  > >
> >  > >
> >  > >
> >
> >
> > --
> >  Santiago Gala
> >  http://memojo.com/~sgala/blog/
> >
> >
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
Ping.

Santiago, Brian, Upayavira - any luck figuring out how to update the
http://www.apache.org/licenses/exports/ page?  Anything I can do to
help?

On Fri, Mar 14, 2008 at 2:19 PM, Santiago Gala <sa...@gmail.com> wrote:
>
>  El vie, 14-03-2008 a las 11:33 -0700, Brian Eaton escribió:
>
> > Thanks Upayvira.  I'm attaching three files to this e-mail.
>  >
>  > export.patch: patch to
>  > infrastructure/site/trunk/xdocs/licenses/exports/index.xml
>  >
>  > email.txt: the text of an e-mail you need to send once export.patch is applied
>  >
>  > notice.patch: patch to incubator/shindig/trunk/NOTICE
>  >
>  > I think you may be the only one who can handle the first two files,
>  > but anyone with shindig commit access can do notice.patch.
>  >
>  > After these three files are handled, I think we are done with
>  > http://www.apache.org/dev/crypto.html
>  >
>
>  I have infrastructure permissions (which I think includes the site), but
>  I'd prefer that Upayavira does it if he can. I will probably try
>  tomorrow or Sunday if he cannot. Definitely not today, not really ready
>  for any work that requires concentration.
>
>  I'd rather apply myself the NOTICE patch, as the commit I did is broken
>  and I have half of the changes here. Also dealing with LICENSE.
>
>  Regards
>  Santiago
>
>
>  > Cheers,
>  > Brian
>  >
>  > On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
>  > >
>  > >  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
>  > >  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
>  > >  > >  If encryption is useful, I'd say that we should follow the export
>  > >  > >  procedure and have it done early, rather than back off now and have to
>  > >  > >  fill the forms later. I posted the URI because I have a few days with a
>  > >  > >  lot of work but I didn't want to let it pass through when I spotted it,
>  > >  > >  and crypto audit/assessment has been an active item in several apache
>  > >  > >  lists lately.
>  > >  >
>  > >  > I've done a bit of research into how we follow this process.  To
>  > >  > continue we need
>  > >  >
>  > >  > (a) someone with "site-dev" karma to modify a web page.
>  > >
>  > >  Er, me, I think.
>  > >
>  > >
>  > >  > (b) the Shindig PMC chair to send an e-mail
>  > >
>  > >  We don't have a chair, so any mentor will do. So, er, me.
>  > >
>  > >
>  > >  > Can you help me locate those people?
>  > >
>  > >  If I recall right, I think I'm sitting right here. Does that help? :-)
>  > >
>  > >  I wonder how much of that Santiago can do too.
>  > >
>  > >  Upayavira
>  > >
>  > >
>  > >
>
>
> --
>  Santiago Gala
>  http://memojo.com/~sgala/blog/
>
>

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
El vie, 14-03-2008 a las 11:33 -0700, Brian Eaton escribió:
> Thanks Upayvira.  I'm attaching three files to this e-mail.
> 
> export.patch: patch to
> infrastructure/site/trunk/xdocs/licenses/exports/index.xml
> 
> email.txt: the text of an e-mail you need to send once export.patch is applied
> 
> notice.patch: patch to incubator/shindig/trunk/NOTICE
> 
> I think you may be the only one who can handle the first two files,
> but anyone with shindig commit access can do notice.patch.
> 
> After these three files are handled, I think we are done with
> http://www.apache.org/dev/crypto.html
> 

I have infrastructure permissions (which I think includes the site), but
I'd prefer that Upayavira does it if he can. I will probably try
tomorrow or Sunday if he cannot. Definitely not today, not really ready
for any work that requires concentration.

I'd rather apply myself the NOTICE patch, as the commit I did is broken
and I have half of the changes here. Also dealing with LICENSE.

Regards
Santiago

> Cheers,
> Brian
> 
> On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
> >
> >  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> >  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
> >  > >  If encryption is useful, I'd say that we should follow the export
> >  > >  procedure and have it done early, rather than back off now and have to
> >  > >  fill the forms later. I posted the URI because I have a few days with a
> >  > >  lot of work but I didn't want to let it pass through when I spotted it,
> >  > >  and crypto audit/assessment has been an active item in several apache
> >  > >  lists lately.
> >  >
> >  > I've done a bit of research into how we follow this process.  To
> >  > continue we need
> >  >
> >  > (a) someone with "site-dev" karma to modify a web page.
> >
> >  Er, me, I think.
> >
> >
> >  > (b) the Shindig PMC chair to send an e-mail
> >
> >  We don't have a chair, so any mentor will do. So, er, me.
> >
> >
> >  > Can you help me locate those people?
> >
> >  If I recall right, I think I'm sitting right here. Does that help? :-)
> >
> >  I wonder how much of that Santiago can do too.
> >
> >  Upayavira
> >
> >
> >
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
Thanks Upayvira.  I'm attaching three files to this e-mail.

export.patch: patch to
infrastructure/site/trunk/xdocs/licenses/exports/index.xml

email.txt: the text of an e-mail you need to send once export.patch is applied

notice.patch: patch to incubator/shindig/trunk/NOTICE

I think you may be the only one who can handle the first two files,
but anyone with shindig commit access can do notice.patch.

After these three files are handled, I think we are done with
http://www.apache.org/dev/crypto.html

Cheers,
Brian

On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <uv...@odoko.co.uk> wrote:
>
>  On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
>  > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
>  > >  If encryption is useful, I'd say that we should follow the export
>  > >  procedure and have it done early, rather than back off now and have to
>  > >  fill the forms later. I posted the URI because I have a few days with a
>  > >  lot of work but I didn't want to let it pass through when I spotted it,
>  > >  and crypto audit/assessment has been an active item in several apache
>  > >  lists lately.
>  >
>  > I've done a bit of research into how we follow this process.  To
>  > continue we need
>  >
>  > (a) someone with "site-dev" karma to modify a web page.
>
>  Er, me, I think.
>
>
>  > (b) the Shindig PMC chair to send an e-mail
>
>  We don't have a chair, so any mentor will do. So, er, me.
>
>
>  > Can you help me locate those people?
>
>  If I recall right, I think I'm sitting right here. Does that help? :-)
>
>  I wonder how much of that Santiago can do too.
>
>  Upayavira
>
>
>

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Upayavira <uv...@odoko.co.uk>.
On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
> >  If encryption is useful, I'd say that we should follow the export
> >  procedure and have it done early, rather than back off now and have to
> >  fill the forms later. I posted the URI because I have a few days with a
> >  lot of work but I didn't want to let it pass through when I spotted it,
> >  and crypto audit/assessment has been an active item in several apache
> >  lists lately.
> 
> I've done a bit of research into how we follow this process.  To
> continue we need
> 
> (a) someone with "site-dev" karma to modify a web page.

Er, me, I think.

> (b) the Shindig PMC chair to send an e-mail

We don't have a chair, so any mentor will do. So, er, me.

> Can you help me locate those people?

If I recall right, I think I'm sitting right here. Does that help? :-)

I wonder how much of that Santiago can do too.

Upayavira



Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Brian Eaton <be...@google.com>.
On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <sa...@gmail.com> wrote:
>  If encryption is useful, I'd say that we should follow the export
>  procedure and have it done early, rather than back off now and have to
>  fill the forms later. I posted the URI because I have a few days with a
>  lot of work but I didn't want to let it pass through when I spotted it,
>  and crypto audit/assessment has been an active item in several apache
>  lists lately.

I've done a bit of research into how we follow this process.  To
continue we need

(a) someone with "site-dev" karma to modify a web page.
(b) the Shindig PMC chair to send an e-mail

Can you help me locate those people?

Cheers,
Brian

Re: [jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by Santiago Gala <sa...@gmail.com>.
El jue, 13-03-2008 a las 16:13 -0700, Brian Eaton (JIRA) escribió:
> [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
> 
> Brian Eaton updated SHINDIG-92:
> -------------------------------
> 
>     Attachment: nocipher.patch
> 
> This patch removes the encryption functions, but leaves authentication (HMAC-SHA1) in place.
> 


If encryption is useful, I'd say that we should follow the export
procedure and have it done early, rather than back off now and have to
fill the forms later. I posted the URI because I have a few days with a
lot of work but I didn't want to let it pass through when I spotted it,
and crypto audit/assessment has been an active item in several apache
lists lately.

Regards
Santiago

> > Crypto utility functions for gadget server
> > ------------------------------------------
> >
> >                 Key: SHINDIG-92
> >                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
> >             Project: Shindig
> >          Issue Type: Improvement
> >          Components: Gadgets Server - Java
> >            Reporter: Brian Eaton
> >            Assignee: Kevin Brown
> >         Attachments: crypto.patch, nocipher.patch
> >
> >
> > Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.
> 
-- 
Santiago Gala
http://memojo.com/~sgala/blog/


[jira] Updated: (SHINDIG-92) Crypto utility functions for gadget server

Posted by "Brian Eaton (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Eaton updated SHINDIG-92:
-------------------------------

    Attachment: nocipher.patch

This patch removes the encryption functions, but leaves authentication (HMAC-SHA1) in place.

> Crypto utility functions for gadget server
> ------------------------------------------
>
>                 Key: SHINDIG-92
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Gadgets Server - Java
>            Reporter: Brian Eaton
>            Assignee: Kevin Brown
>         Attachments: crypto.patch, nocipher.patch
>
>
> Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SHINDIG-92) Crypto utility functions for gadget server

Posted by "Kevin Brown (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12571688#action_12571688 ] 

Kevin Brown commented on SHINDIG-92:
------------------------------------

Awesome -- thanks Brian. I'll commit this soon since it looks good as is, and it won't actually affect any existing code.

> Crypto utility functions for gadget server
> ------------------------------------------
>
>                 Key: SHINDIG-92
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Gadgets Server - Java
>            Reporter: Brian Eaton
>            Assignee: John Hjelmstad
>         Attachments: crypto.patch
>
>
> Shindig will eventually need some crypto utility functions.  I've put some together based on JCE and the Apache Codec libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.