Login or Register to Ask a Question and Join Our Community


UNIX and Linux RSS News

Assurance for Federated Identity Management

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements UNIX and Linux RSS News Assurance for Federated Identity Management
# 1  
Old 03-23-2008
Assurance for Federated Identity Management
HPL-2008-25 Assurance for Federated Identity Management - Baldwin, Adrian; Casassa Mont, Marco; Beres, Yolanda; Shiu, Simon
Keyword(s): identity assurance, identity management, federation, privacy
Abstract: Federated Identity Management is an emerging paradigm that is rightly getting a lot of standardization and research attention. One aspect that is not receiving enough attention is assurance. Given the challenges enterprises faced trying to demonstrate appropriate control of their internal and monoli ...
Full Report

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

certpatch

CERTPATCH(8)						    BSD System Manager's Manual 					      CERTPATCH(8)

NAME

     certpatch -- add subjectAltName identities to X.509 certificates

SYNOPSIS

     certpatch [-t identity-type] -i identity -k signing-key input-certificate output-certificate

DESCRIPTION

     certpatch alters PEM-encoded X.509 certificates by adding a subjectAltName extension containing an identity used by the signature-based
     authentication schemes of the ISAKMP protocol.  After the addition the certificate will be signed once again with the supplied CA signing
     key.

     The options are as follows:

     -t identity-type
	     If given, the -t option specifies the type of the given identity.	Currently ip, fqdn, and ufqdn are recognized.  The default is ip.

     -i identity
	     The -i option takes an argument which is the identity to put into the subjectAltName field of the certificate.  If the identity-type
	     is ip, this argument should be an IPv4 address in dotted decimal notation.

     -k signing-key
	     The -k option specifies the key used for signing the certificate once the subjectAltName extension has been added.  The key is speci-
	     fied by the filename where it is stored in PEM format.

SEE ALSO

     isakmpd(8), ssl(8)

BSD
								   July 18, 1999							       BSD