I have pushed a new version of the code onto github http://github.com/bblfish/keygenapp Again this can best be downloaded with $ git clone git@github.com:bblfish/keygenapp.git It is easier to download it from there for the moment rather than me pushing very early material on a maven repository, where you may still have a lot of comments to make about the code. There is a very simple readme in the xwiki directory which shows how one can install this in 4 very easy steps. http://github.com/bblfish/keygenapp/blob/master/xwiki/README.txt I tested this with a fresh install of the latest snapshots from http://maven.xwiki.org/snapshots/com/xpn/xwiki/products/xwiki-enterprise-je… And I will be working on a branch, so that what you pull from the master branch remains stable. I think I have addressed most of the issues below, but there will certainly be comments and improvements that will come from usage. (One thing I was not able to test was Internet Explorer support) Next I will write a module so that people can login to XWiki using the certificates they made there or elsewhere. All the best, Henry On 24 Feb 2010, at 10:15, Vincent Massol wrote:

+1 Guillaume On Thu, Feb 25, 2010 at 7:16 PM, Vincent Massol <vincent(a)massol.net> wrote: -- Guillaume Lerouge Product Manager - XWiki SAS Skype: wikibc Twitter: glerouge http://guillaumelerouge.com/

I was just thinking that there is probably an improvement that should be made to my code before deployment. The WebId.XWikiUserProfileSheet which replaces the profile sheet allows the user in view mode to create a new key. On clicking submit the key gets added to the browser, and a the modulus and exponent of the RSA key are added as an object to the user's page. Usually changes to a profile are made in edit mode. In edit mode it should be possible for the user also to create a key, and even more so, to delete them. How do I integrate the view mode and the edit mode a bit better? The easiest way to understand the problem is probably to install this on a local development version... Henry On 25 Feb 2010, at 19:43, Story Henry wrote:

On 4 Mar 2010, at 00:29, Caleb James DeLisle wrote: The form could ask the user how long he wants his certificates to last for. Currently the default is one year, but its a simple matter of tweaking the velocity to have that be anything else. Perhaps we should make the default shorter. A test form to play around with these options is available on the WebId.CreateCert page. that sounds very interesting... I was going to work on the login component next... There is a page of some of the services that one can use to login to here: http://esw.w3.org/topic/foaf+ssl/RelyingParties This should be growing quickly as Tim Berners Lee has been backing this effort more visibly recently. Today he gave a talk entitled "Distributed Social Networking Through Socially Aware Cloud Storage" http://www.w3.org/2010/Talks/0303-socialcloud-tbl/ Which places WebIds and foaf+ssl at the center of the architecture. With some notes taken here: http://www.w3.org/2010/03/03-swxg-minutes.html Thanks :-) As most of this is velocity code we should be able to tweak it when its up on the incubator site. One thing I thought would be very nice would be to add the following lines to the header <link rel="openid.server" href="http://openid4.me/index.php" /> <link rel="openid2.provider openid.server" href="http://openid4.me/index.php"/> <link rel="meta" type="application/rdf+xml" title="FOAF" href="your_foaf_file"/> Every profile page would as a result become an OpenId backed by foaf+ssl. There are a few problems though with this, so we can't do it immediately: - I don't know how to add those to the headers from the XWikiUserProfileSheet page - openid4.me requires a pointer to an rdf/xml foaf file for the moment. I'll ask them to tweak their code so they can accept html marked up with rdfa - the home page urls are currently too long to make useful OpenIds. To be typable they should be something like http://xwiki.org/bblfish or http://xwiki.org/p/bblfish So lots more fun stuff to come... Henry

+1 On Thu, Feb 25, 2010 at 19:16, Vincent Massol &lt;vincent(a)massol.net&gt; wrote: -- Thomas Mortagne