EMI caNl Product Team

Members

Daniel Kouril, Weizhong, Krzysztof Benedyczak, Marcel Poul, Frantisek Dvorak, Aleksandr Konstantinov and Zdenek Sustr as the leader

Links

• Common Library for Authentication

Subsystems Maintained by the Product Team

• emi.canl

Documentation

Links

JAVA	http://unicore-dev.zam.kfa-juelich.de/documentation/canl-1.0.1/manual.pdf
C	http://egee.cesnet.cz/cvsweb/SEC/canl.pdf
C++	Currently not available as a separate documentation. Comments included in header files

External Dependencies

JAVA part

Note: this section is only relevant if you use directly jars installed by OS packager. If you use Maven then dependencies are handled automatically and you can skip this section.

Bouncycastle (BC) dependency version is strictly 1.46 for releases 1.0.x and 1.1.x of canl-java. This is because BC is not API/ABI compatible between releases (1.45 or 1.47 are absolutely not acceptable). This version of BC is available in the stock repository of SL6 and is default on this platform. On SL5 and in Deb6 this dependency is available in the older versions. Therefore we provide a separate package bouncycastle146-1.46 for those platforms, providing bcprov-1.46 virtual package. It can be installed together with other versions of the BC library. The canl-java package depends on the virtual package, therefore on SL6 it uses the stock BC RPM, on SL5 and Deb6 the one provided by EMI.

The exact path to the actual jar file installed by an RPM/deb is: /usr/share/java/bcprov-1.46.jar. It is the same for all platforms.

IMPORTANT 1: when forming a classpath never use the version-less link to the BC jar. Always use the full library name, with version.

IMPORTANT 2: you can use BC 1.46 provided by CANL PT for your own purposes, even when not using the CANL itself. However note that this package is not registered as the JDK security provider system-wide and has not a version-less link installed on SL5 or Deb6.

C part

C++ part

caNl Verification and Validation Plan

• Canl Test Plan

Backward Incompatible Changes

caNl-c 2.0

• Declaration of function canl_io_connect() changed. Old declaration:

canl_io_connect(canl_ctx cc, canl_io_handler io, const char *host,
               const char *service, int port, gss_OID_set auth_mechs,ut);
               int flags, struct timeval *timeout);

• New declaration:

canl_io_connect(canl_ctx cc, canl_io_handler io, const char *host,
               const char *service, int port, gss_OID_set auth_mechs,ut);
               int flags, canl_principal *peer, struct timeval *timeout);

Certification Test Results

caNl C-part EMI2 RC4, canl 1.0, multiplatform [Finished]
caNl C-part EMI2 Final RC, canl 1.0, multiplatform [Certified]

caNl C-part EMI3 RC1, canl 2.0.1, multiplatform [Certified]
caNl C-part EMI3 Final RC, canl 2.0.6, multiplatform [Certified]

caNl C-part EMI3 Update 1, canl 2.1.0, multiplatform [Certified]