2019-12-17 Security Subcommittee Meeting Notes

Please see the Minutes of Meetings and recording for the  SECCOM meeting that was held on 17th of December 2019.

Jira No

Summary

Description

Status

Solution

Jira No

Summary

Description

Status

Solution

 

CMPv2 status update – Pawel/Hampus

Issue with lack of support from AAF for CMPv2 implementation.

CMPv2 client implementation connected with AAF CertMan as goal for Frankfurt release.

Issue with lack of support from AAF for CMPv2 implementation.

El Alto code does not build, some contradiction in the code.

Testing with 2 DCAE components (nokia) and SDNC (E///). 

Meeting with Jonathan to be done today.

 

CII Badging update - Tony

tlhansen.us/onap/cii.html

 

None response still coming from some projects.

Some of the CII editors moved and we need to have somebody who has an access to all .

For silver level for some questions we have completely no answers.

Tony will send a summary of answers to David, so ONAP wide answers could be unified accross projects.

 

ONAP and SOL004 VNF signature update – Samuli

ONAP SECCOM Priority 2: Integrity Verification at Instantiation

ONAP SECCOM Priority 3: Service Provider Ability to Sign the Artifacts - no exact mechanism specified yet.

it is not yet an operational requirement.

Package signature is valiated at the onboarding, in the instantiation individual signatures.

Explot occured operationally already via lack of signatures in operators networks.

 

OUR NEXT SECCOM MEETING WILL BE HELD ON 7TH OF JANUARY'20

 

 

 

 

 

 This the material on "ONAP and SOL004 VNF signature update"