[jose] [OT] Presentation about Apache CXF JOSE Implementation

Sergey Beryozkin <sberyozkin@gmail.com> Wed, 22 April 2015 11:18 UTC

Return-Path: <sberyozkin@gmail.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D96E11B3484 for <jose@ietfa.amsl.com>; Wed, 22 Apr 2015 04:18:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.4
X-Spam-Level:
X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, J_CHICKENPOX_41=0.6, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EsuYIJyV0hPv for <jose@ietfa.amsl.com>; Wed, 22 Apr 2015 04:18:41 -0700 (PDT)
Received: from mail-wi0-x22d.google.com (mail-wi0-x22d.google.com [IPv6:2a00:1450:400c:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 806F11B3482 for <jose@ietf.org>; Wed, 22 Apr 2015 04:18:32 -0700 (PDT)
Received: by widdi4 with SMTP id di4so173385512wid.0 for <jose@ietf.org>; Wed, 22 Apr 2015 04:18:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=AzgjDC58oPmow3ruaudgc29ZWMFPGYdDsDO1i5x3nXM=; b=PCi1S1L/mDQ4q5p6R8ZRgLSpBGC2tCqmlnlODKjzD200U4B5fgkH8REElbEHH57A8G Z7ixSUZc3q0PtI+V3UIJXsGmLIMxCdO6q2yS45KRKS8rHqcU8VdXfueWNNIB60vhT6it 3WnTOjTHRUiYNhW25oiwB99JLTvQ9gJVCDwk6Az0SR4DaDqogCDeQrUqN5H9FzpF7fHI 6R9Agms4RrmEE1ghAQlK7O3ze8DmtxA5e6uKFfw+mnzS1KVlDcq5hfPh5jEOIhQjGLld CPiC0nZLd1M4WzRNvGkVxFSfVqN1Wnf6DJCkpAtmtnpd3GWA7VLSFDpa+ZlRSRyrHIUd qjoQ==
X-Received: by 10.194.172.130 with SMTP id bc2mr956986wjc.85.1429701511291; Wed, 22 Apr 2015 04:18:31 -0700 (PDT)
Received: from [10.36.226.2] ([80.169.137.63]) by mx.google.com with ESMTPSA id f8sm7332595wiy.7.2015.04.22.04.18.30 for <jose@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 22 Apr 2015 04:18:30 -0700 (PDT)
Message-ID: <55378385.6090904@gmail.com>
Date: Wed, 22 Apr 2015 12:18:29 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: jose@ietf.org
References: <550909EF.4040505@gmail.com> <550A6154.9040907@gmail.com> <069401d0626f$55cb1990$01614cb0$@augustcellars.com> <D7634D06-AD85-43D8-9057-3D1FF44098B8@ve7jtb.com> <550BB500.4070505@gmail.com> <550BCCA2.709@gmx.net> <CAF2hCba2JKKv9BLbW3-6eDzRQnfyedoTP=eyQCk4TPs4vGEkVw@mail.gmail.com>
In-Reply-To: <CAF2hCba2JKKv9BLbW3-6eDzRQnfyedoTP=eyQCk4TPs4vGEkVw@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/jose/PubVa-JX3NaRcJgLbW2Bh1daTzg>
Subject: [jose] [OT] Presentation about Apache CXF JOSE Implementation
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Apr 2015 11:18:43 -0000

Hi All,
I apologize in advance for the off-topic post but I've seen links to 
other implementations before so I thought I'd share a link to a 
presentation I did at Apache Con NA last week about the JOSE 
implementation [1] of Apache CXF [2] project. The actual presentation's 
content is actually 80% about pure JOSE.

I'd like to thank:
- Brian Campbell for creating Jose4J - I used it to debug an RSA-OAEP 
and EC tests in order to understand why my tests do not work; I also 
wanted to make sure CXF users can use Jose4J if preferred.

- Anders Rundgren for creating a nice demo [3] showing a JWS 
interoperability in action between a WebCrypto client and a JWS-aware 
HTTP server and helping me to get started with it and having a JWS demo 
option even though a very nice JCS style is also shown :-).

- Cologne University team for their expert review which helped to 
modularize/package the implementation better.

In [1] I also referred to the following Java based Apache licensed 
projects (I can not refer to other non-ASF licensed projects at Apache Con):

Jose4J
Apache Oltu
RestEasy
Spring Security

I should've also linked to
http://connect2id.com/products/nimbus-jose-jwt

I will update the slides with this link and be happy to add more links.

If anyone is interested to chat about Apache CXF + JOSE - please send me 
a private email or subscribe to the CXF users list.

Sorry for the noise :-)

Thanks, Sergey


[1] 
http://events.linuxfoundation.org/sites/events/files/slides/ACNA15JoseCxf.pdf
[2] http://cxf.apache.org/
[3] https://mobilepki.org/WCPPSignatureDemo/home