[jboss-jira] [JBoss JIRA] (ELY-234) Implement SPKM-1 GSS mechanism and GSS-K7XIDASOVRG3BZSQ and GS2-DT4PIK22T6APV2PY SASL mechanisms

[David Lloyd (JIRA)]

David Lloyd created ELY-234:
-------------------------------

             Summary: Implement SPKM-1 GSS mechanism and GSS-K7XIDASOVRG3BZSQ and GS2-DT4PIK22T6APV2PY SASL mechanisms
                 Key: ELY-234
                 URL: https://issues.jboss.org/browse/ELY-234
             Project: WildFly Elytron
          Issue Type: Task
          Components: SASL
            Reporter: David Lloyd


Implement the "Simple Private Key" GSSAPI mechanism.  This can be done in one of two ways:

# Implement SPKM as a GSSAPI mechanism, and let the GSSAPI and GS2 SASL mechanism factories automatically pick it out.
# Implement SPKM directly in SASL as "GS2-DT4PIK22T6APV2PY" and do not provide GSSAPI support for other GSSAPI consumers.

SPKM-1 supports unilateral and mutual authentication using keys.  SPKM-3 supports key-based server authentication and password-based client authentication.

Background reading:

* The Simple Public-Key GSS-API Mechanism (SPKM): https://tools.ietf.org/html/rfc2025
* Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family: https://tools.ietf.org/html/rfc5801
* LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM: https://tools.ietf.org/html/rfc2847 (also referred to as SPKM-3)




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)