• Software
• Assessment
• 20110517-S-A-MiniTOP

• To Software Software - To Software-Assessment - Software/Assessment - To previous meeting - To next meeting

Minutes of the MiniTOP on the 2011-05-17

Setting

The MiniTOP will be held via telco 22:00 CEST

Attendees: dirk, uli, ted, marc, michael, marcus, (late: magu)

Topics

new items in last meeting:

• Uli: send Michael reminder: strategy for: "Certificates Class3" problem and "New Roots & Escrow" - proposal to board, working session on Sunday -> documentation

• Testers: Arbitration case a20110312.1 Weak keys, reviewed by Ted

  • needs testing !!! Urgent {-}

• Testers: Arbitration case a20110419.1 Bug #637: Weak Passwords

  • one report: lost password: is fixed on testserver, needs testing !!! Urgent {-}

• Action items from last meeting Meeting Action Items

• triage test on CATS (Update)
• State Testserver Update, Current Patches on Testserver, current running Arbitrations:

  • Arbitration case a20110312.1 Weak keys

  • Arbitration case a20110419.1 Bug #637: Weak Passwords

  • "Thawte" patch Bug# 827 Points-Count-Order-Change project

• strategy plans ...

  • strategy for: "Certificates Class3" problem and "New Roots & Escrow" - proposal to board, done in last board meeting

    • upgrade plan: Press release, Announcements to be presented to board by Community

    • m20110515.2 "Class 3 Certificate Resign"

    • m20110515.3 "Prepare press statement about Class 3 Resign"

      That we ask the community to prepare a press statement, to be sent to
      various groups, and to be accepted by Board before sending out.

• Testgroup: (to contact by phone ?), update
  1. mailing: 15 + 6 contacted, responded: 7 + 6, unresponsive: 8

  2. m20110515.4 "Rewarding testers"

• CI app.test (Update)
• Email probe sent to IANA with ip-address coming from the private ip-range #915
• next meeting: Tuesday, May 24, 2011 22:00

Minutes

• Class3 project: report from last board meeting, questions answered
  • PR: magazine that publishes root + class3 fingerprints
• Running tests: no progress
• Testers to name in patch passed to critical team, emailing CC
  • Barcamp Karlsruhe 18./19. Jumi, testers workshop

    • barcamp-karlsruhe.de (dirk, michael, uli, marc no, npapa ?)

  • live-cd ? how-to, 2nd profile

  • https://nic-nac-project.org/~kaosmos/index-en.html

• testers mailing: 15 + 6 contacted, responded: 7 + 6, unresponsive: 8
• Ted, Markus, Dirk: 2nd review: Bug#897 (Point System info page Wiki redirect)
  • Ted will check on wednesday
• dirk: DEV: a20110312.1 bug#918 Weak keys: /pages/account/.. 4.php, 17.php to combine ? (/includes/keygen.php), no update
• Dirk: DEV: bug#827 regular Thawte patches: still open 15.php - add assurers state at bottom of page Thursday ?, no update
• Ted: bug#942 (cats test), triage test on CATS (Update), to review, to test

• CATS system, add onto mgr server, add ted as console admin on mgr server -> Michael

• add Michael to host console (firewall add)
• Michael: DEV: TMS function (Batch Assurances), no progress

• strategy for: "Certificates Class3" problem and "New Roots & Escrow" - proposal to board, done in last board meeting

  • upgrade plan: Press release, Announcements to be presented to board by Community
  • dirk to contact alex
• Testgroup: (to contact by phone ?), update

  1. m20110515.4 "Rewarding testers"

     • posting proposal: dirk ok, michael ok
     • Marcus: how to proceed if several testers have identical count ?
       1. to raffle off the winner
       2. first max count wins ?
          • dirk a, ted a, michael a, markus a, uli a, marc abstain
     • to contact secure-u supporting this program: problem is that such a project has no vouchers
     • Month 1: May 2011, Month 2: June 2011, limited to reports on listed patches (currently 6), new bug reports do not count
• Email probe sent to IANA with ip-address coming from the private ip-range bug #792
  • header infos rcvd, adding to bug #792
  • whois domain, ok
  • whois ip, complete range, not ok
  • no ip check, blind whois, needs to be checked, banned

  • see also FAQ/NoDomainName

    There is no way to register an certificate for an IP address, only for domain names. This is because we cannot warranty that IP won't change. 

• signer on testserver doesn't work currently, michael checks to fix
• next meeting: Tuesday, May 24, 2011 22:00
• after-show party:
  • working session: dirk, michael
    • git clone ...
• fix Root_Certs table on cacert1.it-sls.de

  • insert into Root_Certs (ID, Cert_Text) values (1,'CAcert Testserver Root');
    insert into Root_Certs (ID, Cert_Text) values (2,'CAcert Testserver Class 3');

Fixed Action Items since last Meeting

• Ted: bug #897 reviewed (within meeting)

  Uli	send Michael reminder: strategy for: "Certificates Class3" problem and "New Roots & Escrow" - proposal to board, working session on Sunday -> documentation	{+}
  Marcus, Uli	testers: to contact by phone, changed to by email	{g}
  Michael	strategy for: "Certificates Class3" problem and "New Roots & Escrow" - proposal to board, working session on Sunday -> documentation	{g}
  Dirk, Uli	Next Board Meeting: Software-Testing - problem to find -active- testers	{g}
  Ted, Markus, Dirk	2nd review: Bug#897 (Point System info page Wiki redirect)	{g}

Action Items New

• dirk: Barcamp Karlsruhe 18./19. Jumi, testers workshop, invite npapa
• uli, markus: testers how-to regarding testserver roots: live-cd ? how-to, 2nd profile add to Welcome Pack
• Dirk, Michael, Mawa: bug#942 (cats test) (ted), triage test on CATS (Update), to review, to test

• Ted, Michael: CATS system, add onto mgr server, add ted as console admin on mgr server -> Michael

• Uli: add Michael to host console (firewall add) (fixed within meeting)

• Dirk: strategy for: "Certificates Class3" problem and "New Roots & Escrow" - Press release, Announcements to be presented to board by Community: contact alex

• Uli: "Rewarding testers" post proposal, publish with updated infos
• Michael: signer on testserver doesn't work currently (problem is triggered gpp key that crashes signer), needs fixing (fixed within meeting)
• Michael: fix Root_Certs table on cacert1.it-sls.de (fixed within meeting)

Action items: Meeting Action Items

• CategorySoftwareAssessment