On Thursday, August 18, 2011 9:06:42 PM Marc Giger wrote: > Hi Colm, > > On Thu, 18 Aug 2011 15:18:02 +0100 > > Colm O hEigeartaigh <[email protected]> wrote: > > Hi Marc, > > > > > So what do you think? Are you interested in it? > > > > Absolutely :-) > > Cool :-)
I agree. Definitely a cool upgrade. > > WSS4J currently has two branches, 1.5.x (current release 1.5.12) that > > is essentially deprecated but still maintained for bug-fixes (and used > > by Rampart), and trunk (current release 1.6.2) which involved the > > Opensaml2 update. Once I finish the Kerberos support trunk will be > > more or less feature complete I think. LOL. "feature complete".... until a customer comes along demanding something else.... ;-) > > I think we could use your project as the basis for a WSS4J 2.0 release > > next year. You would need to submit the code under an Apache License, > > and we could subsequently grant you commit rights for the project. > > Sounds good to me Yep. From a quick look, there is definitely a bit of work to do with it. Obviously separating out the CXF and non-CXF parts would also be a requirement and moving the CXF specific stuff to CXF. (so we don't end up with a circular dependency between CXF and wss4j) Updating to the latest Neethi, etc.... Colm and I have also added a lot of stuff to CXF and WSS4J lately that we'd definitely like to make sure get ported over. Kerberos is one, but there are a bunch of other things as well. There are a few other things to think about with it as well like interactions with FastInfoset (which CXF can currently support, but this wouldn't due to operating on the OutputStream directly instead of an XMLStream/EventWriter). Mapping all the current CXF configs in may take a bit as well, but nothing too major I would expect. .... snip ..... > > What do you think? > > Fine. > Some questions: > - In which format do you expect the source? tar? svn dump? Access > to my repo? ...? And svndump would be preferred. Infra can import that directly into an area of our svn and not lose any history. Basically, you would need to create a svndump, create a md5 hash (and ideally a gpg signature) and make those available someplace. Then file a JIRA at apache pointing to it (or attaching if it's not too big) and record the md5 in the JIRA to make sure it identifies the right bits. We would then need to vote to accept the contribution (mostly a formality). Ideally, we'd vote to make you a committer at the same time. When the vote passes, we get infra to import it. > - Is anything else to do from my side (separating, ...), aside > re-licensing under the apache license? > - Whom should I send the (of course re-licensed) code? See above. Since this is a sizable contribution (more than a simple bug patch), it will likely need an official code grant. See: http://incubator.apache.org/ip-clearance/index.html Filing a grant requires an Apache member to help out, but Colm and I are both members (and there are other around here as well) that would be more than happy to help out. If you have any questions about it, let me know and I'd be happy to help. Also, you should file an Apache ICLA: http://www.apache.org/licenses/#clas That's the first step in getting an account created for you to become a committer. Doing that sooner can help speed things up. > Do you have some more questions? I think that's it for me. Let me just say "very nice job". :-) Dan > > Kind regards > > Marc > > > Colm. > > > > > > > > > > On Tue, Aug 16, 2011 at 11:56 AM, Marc Giger <[email protected]> > > > > wrote: > > > Hello All > > > > > > Back in january i wrote an email > > > (http://mail-archives.apache.org/mod_mbox/incubator-general/201101.m > > > box/%[email protected]%3E) to the > > > incubator mailing list to discuss the inclusion of > > > swssf as a new incubator project. The feedback was positive but > > > the people suggested as alternative way the inclusion into WSS4J. > > > > > > So here I am again:-) > > > > > > It would be a pity when all of the code fizzles out. > > > Details to the project and the code can be found on > > > http://gigerstyle.homelinux.com/?page_id=76 > > > > > > If you find the code or parts of it useful, I'm willing to > > > re-license it under the Apache License. > > > > > > It is not my intention to leave the code the ASF and forget > > > about it. Further development from my side is guaranteed. > > > > > > So what do you think? Are you interested in it? > > > One of the open discussion points will be the integration: Should / > > > Can it be integrated as it is or must be done some adaptions? > > > Or probably you don't like the concept? Tell me please! > > > > > > Thank you. > > > > > > Kind regards > > > > > > Marc > > > > > > -- > > > Lesson 1: Cryptographic protocols should not be developed by a > > > committee. -- Niels Ferguson and Bruce Schneier -- > > > > > > -------------------------------------------------------------------- > > > - > > > To unsubscribe, e-mail: [email protected] > > > For additional commands, e-mail: [email protected] -- Daniel Kulp [email protected] http://dankulp.com/blog Talend - http://www.talend.com --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
