Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-26 Thread Hamilton Chua
Hello Everyone, My name is Hamilton Chua and I am new to these lists and even newer to sugar development and the olpc in general so please do forgive me if the questions I am about to ask have been asked and answered before. I am using a development snapshot of Sugar on a Stick (SoaS) and XS

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-25 Thread Hamilton Chua
Hello Everyone, My name is Hamilton Chua and I am new to these lists and even newer to sugar development and the olpc in general so please do forgive me if the questions I am about to ask have been asked and answered before. I am using a development snapshot of Sugar on a Stick (SoaS) and XS

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-12 Thread Simon Schampijer
Martin Langhoff wrote: On Wed, Feb 11, 2009 at 11:18 PM, Martin Langhoff martin.langh...@gmail.com wrote: On Wed, Feb 11, 2009 at 10:25 PM, Andrés Ambrois I might be missing something, but you're storing the laptop serial number instead of the pubkey inside the cookie (unless /ofw/mfg-data/SN

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-11 Thread Martin Langhoff
On Sat, Jan 24, 2009 at 7:40 AM, Martin Langhoff martin.langh...@gmail.com wrote: Plan C - Simple HTTP cookie Here is a rough cut on the plan C, against the tip of sucrose-0.82 - works on first execution of Browse - works on subsequent executions of Browse - adds the cookie entry if needed

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-11 Thread Martin Langhoff
On Wed, Feb 11, 2009 at 11:20 AM, Carol Farlow Lerche c...@msbit.com wrote: There is an underlying set of security utilities that belong to Mozilla (NSS Good info! I'll be quite happy to look into the toolchain you mention at a later stage, or to take patches from a motivated volunteer. I am

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-11 Thread Martin Langhoff
On Wed, Feb 11, 2009 at 11:18 PM, Martin Langhoff martin.langh...@gmail.com wrote: On Wed, Feb 11, 2009 at 10:25 PM, Andrés Ambrois I might be missing something, but you're storing the laptop serial number instead of the pubkey inside the cookie (unless /ofw/mfg-data/SN doesnt stores a

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-10 Thread Martin Langhoff
On Wed, Feb 11, 2009 at 4:57 AM, Simon Schampijer si...@schampijer.de wrote: Thoughts? Opinions? Code? cheers, I wonder if it would not be best to generate a cert per user when we authenticate the first time with the XS and add this then to the cert8.db in the profile. This works fine -

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-10 Thread Carol Farlow Lerche
http://boblord.livejournal.com/18402.html On Tue, Feb 10, 2009 at 1:20 PM, Martin Langhoff martin.langh...@gmail.comwrote: On Wed, Feb 11, 2009 at 4:57 AM, Simon Schampijer si...@schampijer.de wrote: Thoughts? Opinions? Code? cheers, I wonder if it would not be best to generate a

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-10 Thread Carol Farlow Lerche
Sorry...hit send too soon. The link http://boblord.livejournal.com/18402.html shows how to get rid of the message. To give the xs the identity of the client you send a certificate request to the server. This is in truth the public key of the client, which the server signs and sends back.

Re: [Sugar-devel] Auto-authentication for Browse -

2009-02-08 Thread Martin Langhoff
Hi Simon, Sugaristas, ... any comments on the topic? If I don't hear anything, I'm going to draft a patch for plan C, aka how I learned to stop worrying and love the plain http cookie. - cheers, martin On Sat, Jan 24, 2009 at 7:40 AM, Martin Langhoff martin.langh...@gmail.com wrote: On Thu,

Re: [Sugar-devel] Auto-authentication for Browse -

2009-01-28 Thread Martin Langhoff
On Sat, Jan 24, 2009 at 7:40 AM, Martin Langhoff martin.langh...@gmail.com wrote: In terms of what to do with Browse.xo, I have a couple of rough ideas to propose. *bump* :-) m -- martin.langh...@gmail.com mar...@laptop.org -- School Server Architect - ask interesting questions - don't

[Sugar-devel] Auto-authentication for Browse -

2009-01-23 Thread Martin Langhoff
On Thu, Jan 22, 2009 at 12:39 PM, Simon Schampijer si...@schampijer.de wrote: ===Topics=== c) Auto-authentication for Browse when visiting web-based tools on the XS it has registered to (guest speaker Martin Langhoff) First, *apologies* for the no-show -- I got confused between 14hs UTC and