URL Change to v2.2.1 Certificate Management Library (CML)
Matt Bertapelle <[email protected]> Mon, 25 Aug 2003 14:16:37 -0400
| Newsgroups | gmane.ietf.sfl |
|---|---|
| Message-ID | <[email protected]> |
--------------010309030905060403090300 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit All -- With the recent update to the DigitalNet web site, the source code for the Certificate Management Library (CML) has been relocated to http://digitalnet.com/knowledge/cml_home.htm Alternatively, you can reach the home page for all of the Secure Message Protocol (SMP) freeware libraries from the DigitalNet home page (www.digitalnet.com) by first clicking on "Knowledge Bank" in the upper-right corner, and then on "SMP". This will lead you to all of the freeware libraries supported by DigitalNet. Thank you. Matthew J. Bertapelle, DigitalNet www.DigitalNet.com -------- Original Message -------- Subject: v2.2 Certificate Management Library (CML) Now Available Date: Mon, 24 Feb 2003 18:14:02 -0500 From: "Pawling, John" <[email protected]> To: <[email protected]> All, DigitalNet (formerly Getronics Government Solutions) has delivered the Version 2.2 Certificate Management Library (CML) for Microsoft Windows, Sun Solaris and Linux. The v2.2 CML and documentation is freely available at: <http://www.digitalnet.com/hot/cml_home.htm>. Applications requiring Public Key Infrastructure (PKI) security services can use the CML to meet their X.509 certificate and Certificate Revocation List (CRL) processing requirements. The v2.2 CML is described in the v2.2 CML Application Programming Interface (API) document. It implements the 2000 X.509 Recommendation certification path verification processing rules and SDN.706 profile. It meets the majority of the IETF PKIX RFC 3280 Certificate/CRL Profile requirements. There are some unsupported features such as Delta CRLs. The v2.2 CML Abstract Syntax Notation One (ASN.1) decodes X.509 Certificates and CRLs. It requires the v1.5 Enhanced SNACC ASN.1 software that is freely available from: <http://www.digitalnet.com/hot/snacc_home.htm>. The CML provides robust certification path building capabilities such as using cross certificates. The CML uses the accompanying Storage and Retrieval Library (SRL) (optionally) to provide local certificate and CRL storage management functions. The SRL (optionally) provides remote directory retrieval capabilities using the Lightweight Directory Access Protocol (LDAP). The CML has been thoroughly tested including validating X.509 Certificates and CRLs created by a variety of Certification Authority (CA) products, and signed using the Digital Signature Algorithm (DSA) and RSA algorithms. Further enhancements, ports and testing of the CML are still in process. Further releases of the CML will be provided as significant capabilities are added. v2.2 CML includes the following enhancements (compared to v2.1 CML release): 1) Significantly improved robustness of the certification path building capabilities (especially the building of paths in cross-certified PKI environments). 2) Significantly improved performance and reduced memory requirements of CRL decoding and processing. 3) Enhanced the CML C++ library to support name constraints processing of the IPAddress GeneralName type. 4) Enhanced CML ASN.1 code to process both correct X.501 Clearance attribute syntax. 5) See the CML web site and CML API document for further details. v2.2 SRL includes the following enhancements (compared to v2.1 SRL release): 1) Enhanced SRL to remove the dependency on a local LDAP distribution located in the SMPDist directory. The new SRL uses the distribution that the customer is using on their platform. 2) Enhanced SRL to remove the dependency on LDAP header files. All source code for the CML is being provided at no cost and with no financial limitations regarding its use and distribution. Organizations can use the CML without paying any royalties or licensing fees. The CML was originally developed by the U.S. Government. DigitalNet is enhancing and supporting the CML under contract to the U.S. Government. The U.S. Government is furnishing the CML software at no cost to the vendor subject to the conditions of the CML Public License provided with the CML software. The CML makes calls to an algorithm-independent CTIL API that provides access to a variety of external crypto libraries. There is a CTIL for each crypto library that maps the generic CTIL API calls to the specific calls for that crypto library. DigitalNet provides CTILs for the Microsoft CAPI v2.0, Crypto++, RSA BSAFE, Spyrus SPEX/ and FORTEZZA Cryptologic Interface libraries. DigitalNet also provides a PKCS #11 CTIL that enables PKCS #11-compliant libraries to be used with the CML. The underlying, external crypto libraries are not distributed as part of the CML software. The CML has been successfully tested with the v2.2 S/MIME Freeware Library (SFL) that is freely available from <http://www.DigitalNet.com/hot/sfl_home.htm>. The CML has been successfully tested with the v2.2 Access Control Library (ACL) that is freely available to everyone from: <http://www.DigitalNet.com/hot/acl_home.htm>. The CML has been successfully used to build and verify certificate paths used in the Bridge Certification Authority (BCA) demonstration which includes cross-certified hierarchical and non- hierarchical PKIs. The BCA Interoperability Test Suite (BITS) is a free and openly available test resource provided to facilitate vendor development of secure, interoperable Public Key Enabled applications. The CML has been used to successfully develop and verify the BITS X.509 certification paths available from <http://bcatest.atl.DigitalNet.com>. The National Institute of Standards and Technology (NIST) is providing a standard test suite of X.509 certificate paths <http://csrc.nist.gov/pki/testing/x509paths.html> that can be used for testing applications against RFC 2459. The CML was used to successfully process the NIST test data. The CML meets the requirements stated in the SDN.706 Certificate/ CRL Profile required by the U.S. Defense Message System (DMS) project. The Internet Mail Consortium (IMC) has established a CML web page <http://www.imc.org/imc-cml> and a CML mail list which is used to: distribute information regarding CML releases; discuss CML-related issues; and allow CML users to provide feedback, comments, bug reports, etc. Subscription information for the imc-cml mailing list is at the IMC web site listed above. All comments regarding the CML source code and documents are welcome. This CML release announcement was sent to several mail lists, but please send all messages regarding the CML to the imc-cml mail list ONLY. Please do not send messages regarding the CML to any of the IETF mail lists. We will respond to all messages sent to the imc-cml mail list. =========================================== John Pawling, [email protected] DigitalNet Government Solutions, LLC =========================================== -- Matthew J. Bertapelle, DigitalNet www.DigitalNet.com --------------010309030905060403090300 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"> <title></title> </head> <body> <div class="moz-text-plain" wrap="true" graphical-quote="true" style="font-family: -moz-fixed; font-size: 13px;" lang="x-western"> <pre wrap=""><tt>All -- With the recent update to the DigitalNet web site, the source code for the Certificate Management Library (CML) has been relocated to </tt> <tt><a class="moz-txt-link-freetext" href="http://digitalnet.com/knowledge/cml_home.htm">http://digitalnet.com/knowledge/cml_home.htm</a></tt> <tt> </tt><tt>Alternatively, you can reach the home page for all of the Secure Message Protocol (SMP) freeware libraries from the DigitalNet home page (<a class="moz-txt-link-abbreviated" href="http://www.digitalnet.com">www.digitalnet.com</a>) by first clicking on "Knowledge Bank" in the upper-right corner, and then on "SMP". This will lead you to all of the freeware libraries supported by DigitalNet.</tt> Thank you. Matthew J. Bertapelle, DigitalNet <a class="moz-txt-link-abbreviated" href="http://www.DigitalNet.com">www.DigitalNet.com</a> <tt> </tt>-------- Original Message -------- </pre> <table cellpadding="0" cellspacing="0" border="0"> <tbody> <tr> <th valign="baseline" align="right" nowrap="nowrap">Subject: </th> <td>v2.2 Certificate Management Library (CML) Now Available</td> </tr> <tr> <th valign="baseline" align="right" nowrap="nowrap">Date: </th> <td>Mon, 24 Feb 2003 18:14:02 -0500</td> </tr> <tr> <th valign="baseline" align="right" nowrap="nowrap">From: </th> <td>"Pawling, John" <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a></td> </tr> <tr> <th valign="baseline" align="right" nowrap="nowrap">To: </th> <td><a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a></td> </tr> </tbody> </table> <pre wrap="">All, DigitalNet (formerly Getronics Government Solutions) has delivered the Version 2.2 Certificate Management Library (CML) for Microsoft Windows, Sun Solaris and Linux. The v2.2 CML and documentation is freely available at: <a class="moz-txt-link-rfc2396E" href="http://www.digitalnet.com/hot/cml_home.htm"><http://www.digitalnet.com/hot/cml_home.htm></a>. Applications requiring Public Key Infrastructure (PKI) security services can use the CML to meet their X.509 certificate and Certificate Revocation List (CRL) processing requirements. The v2.2 CML is described in the v2.2 CML Application Programming Interface (API) document. It implements the 2000 X.509 Recommendation certification path verification processing rules and SDN.706 profile. It meets the majority of the IETF PKIX RFC 3280 Certificate/CRL Profile requirements. There are some unsupported features such as Delta CRLs. The v2.2 CML Abstract Syntax Notation One (ASN.1) decodes X.509 Certificates and CRLs. It requires the v1.5 Enhanced SNACC ASN.1 software that is freely available from: <a class="moz-txt-link-rfc2396E" href="http://www.digitalnet.com/hot/snacc_home.htm"><http://www.digitalnet.com/hot/snacc_home.htm></a>. The CML provides robust certification path building capabilities such as using cross certificates. The CML uses the accompanying Storage and Retrieval Library (SRL) (optionally) to provide local certificate and CRL storage management functions. The SRL (optionally) provides remote directory retrieval capabilities using the Lightweight Directory Access Protocol (LDAP). The CML has been thoroughly tested including validating X.509 Certificates and CRLs created by a variety of Certification Authority (CA) products, and signed using the Digital Signature Algorithm (DSA) and RSA algorithms. Further enhancements, ports and testing of the CML are still in process. Further releases of the CML will be provided as significant capabilities are added. v2.2 CML includes the following enhancements (compared to v2.1 CML release): 1) Significantly improved robustness of the certification path building capabilities (especially the building of paths in cross-certified PKI environments). 2) Significantly improved performance and reduced memory requirements of CRL decoding and processing. 3) Enhanced the CML C++ library to support name constraints processing of the IPAddress GeneralName type. 4) Enhanced CML ASN.1 code to process both correct X.501 Clearance attribute syntax. 5) See the CML web site and CML API document for further details. v2.2 SRL includes the following enhancements (compared to v2.1 SRL release): 1) Enhanced SRL to remove the dependency on a local LDAP distribution located in the SMPDist directory. The new SRL uses the distribution that the customer is using on their platform. 2) Enhanced SRL to remove the dependency on LDAP header files. All source code for the CML is being provided at no cost and with no financial limitations regarding its use and distribution. Organizations can use the CML without paying any royalties or licensing fees. The CML was originally developed by the U.S. Government. DigitalNet is enhancing and supporting the CML under contract to the U.S. Government. The U.S. Government is furnishing the CML software at no cost to the vendor subject to the conditions of the CML Public License provided with the CML software. The CML makes calls to an algorithm-independent CTIL API that provides access to a variety of external crypto libraries. There is a CTIL for each crypto library that maps the generic CTIL API calls to the specific calls for that crypto library. DigitalNet provides CTILs for the Microsoft CAPI v2.0, Crypto++, RSA BSAFE, Spyrus SPEX/ and FORTEZZA Cryptologic Interface libraries. DigitalNet also provides a PKCS #11 CTIL that enables PKCS #11-compliant libraries to be used with the CML. The underlying, external crypto libraries are not distributed as part of the CML software. The CML has been successfully tested with the v2.2 S/MIME Freeware Library (SFL) that is freely available from <a class="moz-txt-link-rfc2396E" href="http://www.DigitalNet.com/hot/sfl_home.htm"><http://www.DigitalNet.com/hot/sfl_home.htm></a>. The CML has been successfully tested with the v2.2 Access Control Library (ACL) that is freely available to everyone from: <a class="moz-txt-link-rfc2396E" href="http://www.DigitalNet.com/hot/acl_home.htm"><http://www.DigitalNet.com/hot/acl_home.htm></a>. The CML has been successfully used to build and verify certificate paths used in the Bridge Certification Authority (BCA) demonstration which includes cross-certified hierarchical and non- hierarchical PKIs. The BCA Interoperability Test Suite (BITS) is a free and openly available test resource provided to facilitate vendor development of secure, interoperable Public Key Enabled applications. The CML has been used to successfully develop and verify the BITS X.509 certification paths available from <a class="moz-txt-link-rfc2396E" href="http://bcatest.atl.DigitalNet.com"><http://bcatest.atl.DigitalNet.com></a>. The National Institute of Standards and Technology (NIST) is providing a standard test suite of X.509 certificate paths <a class="moz-txt-link-rfc2396E" href="http://csrc.nist.gov/pki/testing/x509paths.html"><http://csrc.nist.gov/pki/testing/x509paths.html></a> that can be used for testing applications against RFC 2459. The CML was used to successfully process the NIST test data. The CML meets the requirements stated in the SDN.706 Certificate/ CRL Profile required by the U.S. Defense Message System (DMS) project. The Internet Mail Consortium (IMC) has established a CML web page <a class="moz-txt-link-rfc2396E" href="http://www.imc.org/imc-cml"><http://www.imc.org/imc-cml></a> and a CML mail list which is used to: distribute information regarding CML releases; discuss CML-related issues; and allow CML users to provide feedback, comments, bug reports, etc. Subscription information for the imc-cml mailing list is at the IMC web site listed above. All comments regarding the CML source code and documents are welcome. This CML release announcement was sent to several mail lists, but please send all messages regarding the CML to the imc-cml mail list ONLY. Please do not send messages regarding the CML to any of the IETF mail lists. We will respond to all messages sent to the imc-cml mail list. =========================================== John Pawling, <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> DigitalNet Government Solutions, LLC =========================================== </pre> </div> <br> <pre class="moz-signature" cols="$mailwrapcol">-- Matthew J. Bertapelle, DigitalNet <a class="moz-txt-link-abbreviated" href="http://www.DigitalNet.com">www.DigitalNet.com</a></pre> </body> </html> --------------010309030905060403090300--