GT4 Message & Level Security Quality Profile

1. Test coverage reports

2. Code analysis reports

3. Outstanding bugs

  • Bug 2362: location of user proxy for java inconsistencies
  • Bug 2445: Holder problem
  • Bug 2651: /dev/random vs. /dev/urandom
  • Bug 2743: grid-mapfile location should be in global security descriptor

4. Bug Fixes

  • Bug 2178: Any SOAP headers used for dispatching need to be secured
  • Bug 2179: Fix up replay attack prevention
  • Bug 2193: No local subject error
  • Bug 2207: Missing security error 'timestampNotOk'
  • Bug 2371: Better error reporting for security descriptor parsing errors
  • Bug 2523: Core should cause error/warning for bad containerSecDesc file

5. Performance reports

Secure access of WSRF and WSN operations using GSI Transport and GSI Secure Message have been measured. Test reports are here.