Hi, Apologies for cross posting, but this also needs to show up on the ONIE mailing list.
I think we are on the same page regarding image authentication and verification. It will be a good meeting. The CBW proposal shares commonality with the ONIE proposal sent to the mailing list last month. For those who do not subscribe to the ONIE mailing list the proposal and thread are here: http://mirror.opencompute.org/onie/docs/ONIESecureBootv2.pdf http://lists.opencompute.org/pipermail/opencompute-onie/2017-April/001388.html One part of the CBW proposal I do not fully understand is the need to "verify the code signer's identity (CN in certificiate) matches the user provided value". I probably do not understand the CBW problem space enough, but under what circumstances is this helpful? An example would be useful. Looking forward to more discussion on Monday. Cheers, Curt On Thu May 11 15:45, Rajat Ghai wrote: > Hi, > > We'll have our monthly OCP CBW meeting at the scheduled date/time next > Monday (Fuze meeting details below) > > For those who are don't know, CBW is the OCP WG that focuses on Canpus, > Branch & Wi-Fi OCP eco-system > More information on CBW objectives are described here @ > http://www.opencompute.org/wiki/Networking/CBWCampus2cBranch2CAndWireless > > This months meeting will also host ONIE WG as one of the key agenda item is > about discussing and addressing CBW secuirty requirements for ONIE (mostly > around secure internet connectivity (e.g. openSSL support) ; > > Agenda > ---------- > > CBW / ONIE presentation (Mojo) - 45 minutes {presentation attached} > > CBW linux update (Abylay) - 15 minutes > > > Meeting logistics : > > Fuze meeting URL: http://fuze.me/24798495 > <https://urldefense.proofpoint.com/v2/url?u=http-3A__fuze.me_24798495-2D&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=9OXeVvb4F_3KpIM1FO0Uig&m=KAISb1xSz8KM29eF0CY18l77RoFgdXrRmBBmk5GKn4Q&s=mP2_YG6BPkLREfcAcsit-jVRUC-Hmy-TqkLf1o__TKk&e=> > > > Phone/dial-in: +1 (201) 479-4595, meeting number 24798495 > > 1300 EST / 1000 PST ; Monday May 15th 2017 > > --- > BR > Rajat Ghai > Project Lead (OCP - CBW) > http://www.opencompute.org/wiki/Networking/CBWCampus2cBranch2CAndWireless > _______________________________________________ > opencompute-networking mailing list > Unsubscribe: > http://lists.opencompute.org/mailman/options/opencompute-networking > > opencompute-networking@lists.opencompute.org > http://lists.opencompute.org/mailman/listinfo/opencompute-networking _______________________________________________ opencompute-networking mailing list Unsubscribe: http://lists.opencompute.org/mailman/options/opencompute-networking opencompute-networking@lists.opencompute.org http://lists.opencompute.org/mailman/listinfo/opencompute-networking