An open discussion list for topics related to the eduGAIN interfederation service.

[Tomasz Wolniewicz <twoln AT umk.pl>]

Kristof, Peter,
   We will, of course put up the new certificate and fingerprint on the
WEB page, but I did not want to cause confusion while we were still in
the test phase. My assumption was that we are not renewing the trust
relationship, the trust comes from the public key you have and not from
the package it sits inside. I got some mails off-list which seemed to
confirm that if we just reissue the certificate with the same keys then
this is not going to cause problems for anybody, i.e. you could still
use the old cert for content validation. Frankly, I do not know how the
validator would behave if you tell it to validate against a stale
certificate - it could issue some warnings, perhaps.

Anyway, I will put up the new cert later in the day.

As to mail signing, I use S/MIME and my TCS certificate. I think this is
a more natural way to proceed, easy to verify by anyone.

Tomasz
 


W dniu 03.07.2014, 08:31, Kristof Bajnok pisze:
> Hi Tomasz,
>
> On 2014-07-02 22:58, Tomasz Wolniewicz wrote:
>>    as I have announced earlier today, we are in the process of reissuing
>> the signing cert for MDS.
>> The new certificate uses the same key pair as the old one.
> even though the key is the same, could you publish the new signing
> certificate in some form on the web? Probably also in a GPG-signed
> e-mail on these lists.
>
> Kristof

-- 
Tomasz Wolniewicz    
  twoln AT umk.pl     http://www.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication
                                      Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750  fax: +48-56-622-1850 tel kom.: +48-693-032-576

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME