Uma proposta para automatização da administração de redes IPSec juntamente com PKIs, utilizando uma API própria

• Eduardo Fernandes Piva UNICAMP
• Paulo Lício de Geus UNICAMP

DOI: https://doi.org/10.5753/sbseg.2004.21242

Abstract

This paper describes how to decrease the PKI related administrative tasks by removing the certificate renew and revocation processes, without losing the security features provided by the PKI. An API following the paper proposal was developed and is also described inthis paper.

References

Addams, C. e Farrel, S. (1999). Internet x.509 public key infrastructure certificate management protocols. Internet Engineering Task Force, RFC 2510.

CSP (2004). Csp - certificate service provider. Disponivel em World Wide Web (Março de 2004): <http://devel.it.su.se/projects/CSP/>.

Frankel, S. (2001). Demystifying the ipsec puzzle.

GNUTLS (2004). The gnu transport layer security _library. Disponível em World Wide Web (Fevereiro de 2003): <http://www.gnu.org/software/gnutls/documentation/libasn1/asn1.html>.

Harkins, D. and Carrel, D. (1998). The internet key exchange (ike). Internet Engineering Task Force, RFC 2409.

Housley, R. and Ford, W. (1999). Internet x.509 public key infrastructure certficate and crl profile, Internet Engineering Task Force, RFC 2459.

Jonah (2004a). Higher education pki technical activities group. Disponível em World Wide Web (Março de 2004): <http://middleware.internet2.edu/hepki-tag/opensre.html>

Jonah (2004b). Mit jonah pkix freeware distribution home page. Disponível em World Wide Web (Margo de 2004): <http://web.mit.edu/pfl>.

Kent, S. and Artkinson, R. (1998). Security architecture for the internet protocol. Internet Engineering Task Force, RFC 2401.

Libtasn1 (2004). Asn.1 structures parser. Disponível em World Wide Web (Fevereiro de 2003): <http://www.gnu.org/software/gnutls/documentation/libasn1/asn1.html>

Loyd, A. . (1999). Understanding public-key infrastructure.

Maughan, D., Schertler, M., Schneider, M., and Turner, J. (1998). Internet security association and key management protocol (isakmp). Intemet Engineering Task Force, RFC 2408.

OpenCA (2004). Disponível em World Wide Web (Março de 2004) <http://www.openca.org/>

OpenSSL (2004). Openss - the open source toolkit for ssl/tls. Disponível em World Wide Web (Margo de 2004): <http://www.openssLorg>.

Oscar (2003). Disponível em World Wide Web (Fevereiro de 2003) <http://oscar.dste.qut.edu.au>.

PyCA (2004), pyea - x.509 ca. Disponível em World Wide Web (Março de 2004): <http://www.pyca.de>.

RSASecurity (2004a). Pkes#10 - certification request syntax standard. Disponível em World Wide Web (Margo de 2004): <http://www.rsasecurity.com/rsalabs/pkcs/pkcs-10>.

RSASecurity (2004b). Public-key cryptography standards. Disponível em World Wide Web (Margo de 2004): <http://www.rsasecurity.com/salabs/pkes/index.html>

Workgroup, P. (2004). Public key infrastructure (x509) (pkix). Disponível em World Wide Web (Março de 2004): <http://www.ietf.org/html.chanters/pkix-charter.html>.

Xenitellis, S. (2000). Open source pki book. Disponível em World Wide Web (Março de 2004): <http://ospkibook.sourceforge.net/>.