[36245] in Kerberos
Re: What happened to PKCROSS?
daemon@ATHENA.MIT.EDU (Nico Williams)
Wed Jul 2 12:13:56 2014
MIME-Version: 1.0
In-Reply-To: <B0821B5D-5061-4498-8947-84EFF6A345B6@openfortress.nl>
Date: Wed, 2 Jul 2014 11:11:25 -0500
Message-ID: <CAK3OfOi+5t-V9oKj1NZYnQiKvHHiyB_u4v0ykuPdZBCVFKeuKg@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: Rick van Rein <rick@openfortress.nl>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On Wed, Jul 2, 2014 at 6:23 AM, Rick van Rein <rick@openfortress.nl> wrote:
> Hi Nico,
>
>> But mainly the appeal of this approach is that the pieces needed all exist.
>
> Are you talking of http://www.citi.umich.edu/projects/kerb_pki/ as your kx509 implementation? It appears to be based on Kerberos4…
No. Heimdal has a kx509 server and client. And there are other
implementations:
https://secure-endpoints.com/kcacred/index.html
http://www.umich.edu/~x509/
It's actually in fairly widespread use too:
https://fermi.service-now.com/kb_view.do?sysparm_article=KB0010800
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos