(CCing multiple mailing lists to reach a broader audience including current deployments of GT 4.0.x)
There have been multiple requests to support signing policy files in Java GSI implementation and an enhancement bug has been filed: http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=3789. This work is being targeted for the GT 4.2 release. Tasks for campaign: - Evaluate support for signing policy on C side - Add signing policy file parsing and enforcement in CoG JGlobus to mimic C functionality - Tests for code base - Documentation - Merge code with trunk and GT 4.0.x code base. I propose that the signing policy enforcement be a requirement in the trunk (GT 4.2.x) code base, with an option to turn off the requirement. This would mimic C infrastructure requirements. For the GT 4.0.x code base, to maintain backwards compatibility, I propose that the default continue to not require the signing policy file, with an option to require enforcement. If you have any feedback, let us know. Rachana
