Implement SPKM-1 GSS mechanism and GSS-K7XIDASOVRG3BZSQ and GS2-DT4PIK22T6APV2PY SASL mechanisms ------------------------------------------------------------------------------------------------ Key: ELY-234 URL: https://issues.jboss.org/browse/ELY-234 Project: WildFly Elytron Issue Type: Task Components: SASL Reporter: David Lloyd Fix For: 2.0.0.Alpha1 Implement the "Simple Private Key" GSSAPI mechanism. This can be done in one of two ways: # Implement SPKM as a GSSAPI mechanism, and let the GSSAPI and GS2 SASL mechanism factories automatically pick it out. # Implement SPKM directly in SASL as "GS2-DT4PIK22T6APV2PY" and do not provide GSSAPI support for other GSSAPI consumers. SPKM-1 supports unilateral and mutual authentication using keys. SPKM-3 supports key-based server authentication and password-based client authentication. Background reading: * The Simple Public-Key GSS-API Mechanism (SPKM): https://tools.ietf.org/html/rfc2025 * Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family: https://tools.ietf.org/html/rfc5801 * LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM: https://tools.ietf.org/html/rfc2847 (also referred to as SPKM-3)