• To Software Software - To Software-Assessment Software/Assessment - To previous meeting - To next meeting

---

Minutes of the MiniTOP on the 2012-06-12

Setting

The MiniTOP will be held via telco 22:00 CEST

Attendees: marcus, dirk, michael, benny, uli, alex, (late) magu

Topics

(skip to agenda)

Action items from last meeting Meeting Action Items

Agenda

1. Preface

1. Cebit brainstorming
   • dirk: request for events report
   • (2012-03-27) Marcus awaiting translation from Marc
   • (2012-04-03) Marcus will do upcoming (easter) weekend
   • (2012-04-17) no update
   • (2012-04-24) no update
   • (2012-05-29) no update, uli: marcus please translate by yourself
   • (2012-06-05) no update

2. Permissions Review

1. dispute cases

   • new bug: bug #1038 Provide a script for board/tverify reset flags by arbitration a20110118.1

   • re bug #1003 Permissions review script, to incorporate new intermediate ruling

2. Permissions review and revoke of board and tverify flag (bug #1003 and bug #1038)

   • Michael run the permission preview script. After finding some formating stuff and fixing it, the script was run a second time.

   • Afterwards Michael run the script revoke of board and tverify flag. The executing report was added as private to bug #1003

   • All tester please review your flags and mails on the test server and report ONLY in bug #1003.

3. fix available, tested, next run close before
   • last run: 2012-03-30, next run 2012-06-30

   • to dirk: 2nd review bug#1003

   • dirk: review looks ok
   • has been tested on testserver, on local testserver by Michael
   • good to go
   • part 1: recuring script, ok
   • part 2: permission reset, notification of users missing, fixed, tested, awaiting 2nd review again

3. 2nd review of about 6 patches

• Software-Assessors task

  1. bug #789 OA edit domain fix, Editing domain for organisations does not work
     new update 2011-09-26
     2 tests, needs 2nd review, deploy
     more fixes, more testing

     • 2nd review of 1 patch
       • Michael cannot do, needs doing by dirk (or other Software-Assessor, who else?)

  2. bug #978 bug 978 (weak keys) (bug 918)

     • invalid key format, no regular error message, something wrong, error code # identified
     • debugging infos from user + infos from critical team with error code #, was spkac routine
     • one test done 2011-12-17 by JensK

     • uli, marcus: more tests: certs routine, weak keys (small keys test), relates to bug#540 tests

     • (week 7)

  3. bug#540 No key usage attribute in cacert org certs anymore?

     • also: bug#905

     • Policy group discussion - Extended key usage -> p20111113, motion CARRIED

     • deployment

       1. prepare fixes -> Michael to prepare diffs, against svn

       2. sending to testserver
       3. transfer to critical system
     • (2011-12-13) approx 2 weeks to write the fix, approx 2 months to go
     • Michael did transfer the patch to testserver
       • signer code update
       • changes against svn
       • uli, to add to tester portal, done
       • uli to inform testers about new tests
       • test report from kenneth to transfer to report (email from 2011-12-25)
         • Michael: where to find the report from kenneth? link?
         • NEO has added the report (written to private dl)
       • who has adobe 8 for testing?
         • magu has, please test
       • next: needs testing (week 6)
         • uli, marcus: needs full cert create tests
         • uli (2012-01-25): sent notification to software testers
         • awaiting testing ... problem FULL test, including all possible variations with certs creation

         • also to report under bug #978 bug 978 (weak keys) (bug 918)

       • Testers: test all certs veriations, functions

  neo	bug #1024 Assurer flag is not set correctly on updatesort.php run	tested by 4, ok	1 {0}
  uli	bug #967 OA isassurer check	Give an OA the opportunity to check if a designated Organisation Administrator is a CAcert assurer	2 {0}
  Michael	bug #540	p20111113 CPS #7.1.2 "Certificate Extensions" adjustments - testing uli, marcus: needs full cert create tests duplicate report to bug#978	3 {0}
  inopiae	bug #981 OA overview (dupe of bug #943)	New layout of view for Organisation Administrators in account/id35	4 {0}
  neo	bug #978 Invalid SPKAC requests are not properly validated	recheck full certs signing procedures duplicate report to bug#540	5 {0}
  uli, ted	bug #789 OA edit domain fix	Editing domain for organisations does not work new update 2011-09-26 2 tests, needs 2nd review, deploy more fixes, more testing	6 {0}

4. bug #1023 Testing (6.php)

1. Thawte points removal, final step
   • last patch transfered to production system 2012-05-30
2. what are the next steps for thawte points revoke?
   • points settings codes eg 50 pts open gpg/pgp, which certs avail by how many pts
   • 15.php needs rename to 10.php

5. Marcus Bugs list

• bug#1023 related

  • bug#583 "Assure Somebody" allows future assurance dates

  • bug#648 send message from Assurer to Member

  • bug#802 Name parts should be designated in assurance form

  • bug#870 My Details - My Points show bugus time stamp

  • bug#914 Information about Practice on Name while entering an Assurance

  • bug#930 types wrong points in "Assure Someone" form

  • bug#931 Date of assurance in future don't throw any exception

  • bug#998 When entering an assurance in the WoT one line of the form the suffix is given in another line the suffix is missing.

  • bug#1000 Entering an assurance into the system after searching for an assurer causes a pre-filled location field

• Others

  • bug#118 Secure TTP Form upload - outdated, conflicts with new procedure, closed

  • bug#428 Reminder language-drop-down-box doesn't keep "English" if you choose it again - cannot be reproduced, tested by 2, closed

  • bug#489 Pb on rewarding 2 points for an assurance

  • bug#567 case sensitive email: tested by 2, cannot be confirmed, closed

  • bug#767 Single-quotes escaped in Web-of-Trust contact form.

• see also Software/BugsOverview

6. next meeting

• Tuesday, June 19th, 2012 22:00 CEST

Minutes

1. Cebit brainstorming
   • (2012-06-12) in the next days

2. Permissions Review bug #1003 and bug #1038

   1. fix available, tested, next run close before
      • part 1: recuring script, ok
      • part 2: permission reset, notification of users missing, fixed, tested, awaiting 2nd review again
3. neo: started tarball import for git:cacert
4. waiting for dirk an running machine
5. certs, audit ev certs, cabforum discussions
6. next meeting: 19.6.2012

Fixed Action Items since last or within meeting

• neo, ted, dirk

  bug #1072 CATS results don't get imported due to IP address change

  urgent fix

  {g}

Action Items New

Action items: Meeting Action Items

---

• CategorySoftwareAssessment