EUGridPMA 56 (jointly with GN43 EnCo and EOSC(F) ISM)

4 Oct 2022, 09:00 → 6 Oct 2022, 17:00 Europe/Zurich

CERN

Accommodation

• An economic option is the CERN Hostel, which can be booked via this form
• There are many hotels in Geneva and near Geneva Airport, all of which are easily accessible via the Tram 

Directions to CERN
On the CERN website you can find directions to CERN.

Public Transport
Transports Publics Genevois (TPG) provide good coverage of the area. If you are staying in a Hotel (not the CERN Hostel) you will be given a complementary travel card. Tram 18 takes you between CERN and the City Centre with a 'Billet Tout Genève validité 60''. Tickets can be purchased from machines at each stop. 

Directions to the airport from CERN
To get to the airport, you can use the CERN Shuttle Service (circuit 4), which leaves from in front of the hostel.
 

2022-10-06 10.34.51 EUGridPMA56--meeting_saved_closed_caption.txt

2022-10-06 13.51.20 EUGridPMA56--meeting_saved_closed_caption.txt

2022_10_06 EUGridPMA56 notes.pdf

dinner.png

eugridpma56-meeting-summary.pdf

meeting_saved_closed_caption--2022-10-05 12.13.50 EUGridPMA56.txt

meeting_saved_closed_caption--2022-10-05 15.38.02 EUGridPMA56.txt

Realtime Notes

Tuesday, 4 October

EUGridPMA and IGTF: Morning

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

56-EUGridPMA-Geneva-intro.pdf

56-EUGridPMA-Geneva-intro.pptx

1 Welcome, agenda, minutes last meeting, note taker, introductions

Speaker: David Groep (Nikhef National institute for subatomic physics (NL))

2 Self-audit review & status of suspended authorities

experience with the real-time collaborative review process

Speaker: Cosmin Nistor (ROSA)

3 anycast solutions update and IPv6

Speaker: David Groep (Nikhef National institute for subatomic physics (NL))

Building-stateful-HA-services-for-RCauth.eu-20221004.pdf

Building-stateful-HA-services-for-RCauth.eu-20221004.pptx

10:40 Coffee

4 SHA2 for self-signed roots and current RH9 policy bugs

Although the digest function used for self-signed roots is immaterial, and there are still a lot of SHA-1 based self-signed roots in the WebPKI (and recognised in OS/distributions) - for some reason RH9 derived systms fail to recognise SHA-1 certs as distributed by the IGTF.
Discssion on reasons, mitigations, re-issuancance, and trnasition.

Participation by all (esp. relying parties with RH9needs) is appreciated ...

Speaker: David Groep (Nikhef National institute for subatomic physics (NL))

sha-1-roots-FF-and-RH9.pdf

sha-1-roots-FF-and-RH9.pptx

12:30 Lunch

EUGridPMA and IGTF: PKIX and trust store issues discussion

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

56-EUGridPMA-Geneva-intro.pdf

56-EUGridPMA-Geneva-intro.pptx

5 IGTF and root programme co-existance discussions

See the IGTF position statement on server BR changes and domainComponent.

and in addition to the server SSL BRs, there is also a potentially disruptive change for client certs: https://github.com/cabforum/smime/blob/preSBR/SBR.md
There is a "legacy"-Profile, where things like DC= (or info=) might be acceptable, but in the profiles "strict" and "multipurpose" these things will not be allowed. Goal is to deprecate the legacy-profile pretty soon.

But for client auth, the need for a publicly trusted chain is likely less?

Speaker: David Groep (Nikhef National institute for subatomic physics (NL))

CABF-BR-and-joint-trust.pdf

CABF-BR-and-joint-trust.pptx

15:30 Tea

6 Updates from the Americas and the WoTBaN&AZ

Speaker: Derek Simmel (PSC)

TAGPMA-Update-20221004-EUGridPMA56.pdf

19:00 Dinner at Piatto d'Oro Meyrin

Wednesday, 5 October

Attribute Authorities and Proxy Security: AAOPS: Morning: practical proxy operations and IAM

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

7 Developments in HPCI and the Asia Pacific

Speaker: Eisaku Sakane (NII)

EisakuSakane_APGridPMA-Update_Devs-HPCI-GakuNin.pdf

8 Trust anchor splits and tokens

Speakers: Dr David Crooks (UKRI STFC), Mario Lassnig (CERN)

Trust_Split+tokens.pdf

Trust_Split+tokens.pptx

9 Introduction to AARC-G071 AAOPS

Speaker: David Groep (Nikhef National institute for subatomic physics (NL))

10 Introduction to the proxies

Speakers: Francesco Giacomini (INFN CNAF), Hannah Short (CERN), Thomas Dack, Mr Tom Dack (Science and Technology Facilities Council STFC (GB))

11:00 Coffee

11 Discussion and workshop (continued)

AARC-G071 assessment spreadsheet (template)

UK-IRIS AAOPS assessment sheet

WLCG AAOPS assessment sheet

12:30 Lunch

12 Data Center Visit

Attribute Authorities and Proxy Security: AAOPS: AAOPS giudelines self-assessment and review

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

13 Towards a trust list distribution for token issuers

• consumers of a trust list
• qualification requirements: G071 + an assurance level?
• multiple assurance lists
• meta-data to be in the list(s)?
• format: alignment with OIDCfed JSON schema?

15:30 Tea

14 Next steps and assessments

19:00 Dinner at Cave Valaisanne

Traditional Swiss restaurant https://cavevalaisanne.ch

Thursday, 6 October

Enabling Communities & AARC Community

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

15 WISE updates

Speakers: David Kelsey (Science and Technology Facilities Council STFC (GB)), David Kelsey (STFC - Science & Technology Facilities Council (GB))

16 Enabling Communities: next steps and developments for GN5

Speaker: Mr Maarten Kremers (SURF)

20221006-EnCo_EUgridPMA56.pdf

20221006-EnCo_EUgridPMA56.pptx

EnCo Policy Minutes

10:30 Coffee

17 Assurance and FIM4R (open space)

Speaker: Jule Ziegler (LRZ)

Draft FIM4R TechEx Agenda December 2022.pdf

FIM4R at TechEx - save the date 4th December

18 WISE Community updates and SCI

Speakers: David Kelsey (STFC - Science & Technology Facilities Council (GB)), David Kelsey (Science and Technology Facilities Council STFC (GB))

12:30 Lunch

Enabling Communities & AARC Community

Convener: David Groep (Nikhef National institute for subatomic physics (NL))

19 John’s Soapbox

Speakers: John Kewley, John Kewley (STFC), John Mark Kewley (Unknown-Unknown-Unknown)

JK-Soapbox.pdf

JK-Soapbox.pptx