eID task force meeting.
...
- The architecture changed to separate each member state to favour the specific national connector. The problem is not to big, and for for second wave is not a problem.
- There is a new document, sent by Soeren Bittins to Licinio Kustra Mano aboun this.
- We have eIDAS in Austria.
- We do not have a eIDAS to test a node, we only have one and need a second.
- AMA(Portugal) is funded for that and should provide
- We cannot use STORK 2, we should use eIDAS (eSENS requirement).
- There is a bugfix for level 3, but it is not yet included on the OpenNCP release.
- João asked if we could include the sources for the jar (binaries) car signing components in the OpenNCP source:
We cannot provide sources for signing, because the componente need to be legal certified. There is a need for a governance on this matter.- (not discussed in TelCo, added for clarity by soeren) the eHealth eID components are comprised of a core, the OASIS DSS signature addon, and the AuthN addons LARMS and LAM.
- The DSS service is based on SD-DSS and has been extended to support more signatures and signature placements. Fully available as source code.
- LARMS and LAM are fully available as source code.
- It is, however, currently inadvisable to publish the source code of the eID core alongside with the OpenNCP as the unchanged binary version carries a certification towards BSI TR-03124. Unintended or uncovered changes may invalidate the certification. There is a need for strict governance on this matter. The source code is naturally available through e-SENS WP 5.2.1.
- Soeren Bittins will send an email about this matter.
...
- Replace some infrastructure by official CEF building blocks.
- Soeren Bittins can volunteer to clarify.
- eIDAS adapter.
- DDSS SD-DSS (Digital signature component)
- We could benefit by adopting these components, they are already certified.
...