Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Certificate Authentication plugin for MISP #464

Merged
merged 10 commits into from
May 13, 2015
Merged

Conversation

capile
Copy link
Contributor

@capile capile commented Apr 17, 2015

This is a proposal for a new authentication plugin using client SSL certificates. I tried to be the least intrusive as possible at the MISP code (leaving everything configurable), but still I had to make a minor update to the AppController.

The plugin also has some options to fetch data from a REST API and even create users on demand — if you prefer, I can make these procedures as separate plugins.

I may also upload afterwards more detailed documentation, such as how to set up CACert (which issues free, public SSL certificates) as a alternative authentication.

Our main goal is to use FIRST.Org client SSL certificates for authentication on a beta MISP service.

Thanks in advance,

Guilherme Capilé

@capile
Copy link
Contributor Author

capile commented Apr 28, 2015

Removed session handling from the plugin and moved it to the AppController, so that the gpgkey could be properly unset. Also made that update on the token authentication — that was saving the GPG key with the session.

@iglocska iglocska merged commit 3055d15 into MISP:master May 13, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants