What is described in e-Sens

• There will be a configuration for each country defining the following:
  • Service Locator
    • It is a service locator to determine connectivity information / routes / location of the service which shall be connected too. 
    • If a sender of an information wants to get information about the capabilities of an endpoint, it first has to learn the location of the capability service, therefore the service lookup is needed
  • Capability Lookup
    • which business processes the receiver can participate in
    • which eDocuments can be received
    • the security setup
    • the evidence setup
    • the communication protocol setup
    • the location of receiver's gateway
    
    
    
  More details needed for capability lookup configuration 

What modules are implicated:

• TSLSync
• TSLEditor
• Configuration Manager Changes (???)
• VPN Configuration (???)

What must it be implemented

1. Central Configuration Service for accepting such king of documents. This has to be implemented and hosted centrally
2. User Interface for creating the definition file of services (replacement for TSLEditor). We could implement it now with a web interface.
3. TSL Sync changes to adopt the changes of the services definition file

Functional description

• ...

Questions

• WE HAVE TO THINK what added value will this file gives to OpenNCP, and if it solves any problem 
• What kind of file has each PN to prepare in order to register its services (something like tsl?)
• Will it be a replacement for TSL? If yes, we have to assume for replacement of tsleditor and tslsync
• Is service locator aware of the status of the service (up-down)?
• Service locator shall also have information about test systems?
• Is it meant only for the purpose of providing information about the location of the capability services?
• As a central service, which can be used/requested by the senders, e.g. accessing by OpenNCP
• Problem: what about the technical network connections and configurations necessary, e.g. firewall restrictions. For example currently you can download the TSL file from the configuration service, the local OpenNCP database is updated with the endpoint information, the certificates are installed in the truststore, but to be able to connect successfully, the firewall rules of the receiving site must allow access from the caller´s side, the VPN connection must be configured properly, ...
• As a component of OpenNCP ? Not in my opinion, central service,  but OpenNCP may register there at startup
• As a central service, which can be used/requested by the senders, e.g. accessing by OpenNCP
  
  

Action Items:

• person - task -date