[opencms-dev] OpenCms-OpenSign module has been released

[Shi Yusen]

Hi list,

OpenCms-OpenSign module has been released. You can get the module from
here:
http://www.langhua.cn/viewvc/modules/opencms-opensign/trunk/modules/

Here is the release note:


This OpenCms-OpenSign module is developed and tested in OpenCms 7.0.3
and OpenSign 1.6.4, JDK 1.6, Fedora Core 7 and Windows XP, IE 6 SP2 and
Firefox 2.

Purpose
The purpose of this module is to make OpenCms support PKI certificate
logon and digital signature.

About
OpenCms: http://www.opencms.org/
OpenSign: http://www.openoces.org/
Langhua: http://www.langhua.cn/

Source Code:
To avoid the legal problems may happen in the future, we put the code in
our svn. You can get the source code from:
OpenCms-OpenSign SVN (username/password: anon/anon)
http://www.langhua.cn/langhua/opencms-opensign/
OpenCms-OpenSign ViewVC
http://www.langhua.cn/viewvc/opencms-opensign/
SVN of OpenSign 1.6.4 Langhua build (username/password: anon/anon)
http://www.langhua.cn/langhua/tools/opensign-1.6.4/
ViewVC of OpenSign 1.6.4 Langhua build
http://www.langhua.cn/viewvc/tools/opensign-1.6.4/

1. Import cn.langhua.opencms.opensign module.

2. Edit web.xml, add the following:
    <servlet>

        <servlet-name>OpenSignVerifier</servlet-name>


<servlet-class>cn.langhua.opencms.opensign.CmsOpenSignVerifier</servlet-class>

    </servlet>

    <servlet-mapping>

        <servlet-name>OpenSignVerifier</servlet-name>

        <url-pattern>/opensign/verifier</url-pattern>

    </servlet-mapping>


    <servlet>

        <servlet-name>OpenSignDisplay</servlet-name>


<servlet-class>cn.langhua.opencms.opensign.CmsOpenSignDisplay</servlet-class>

    </servlet>

    <servlet-mapping>

        <servlet-name>OpenSignDisplay</servlet-name>

        <url-pattern>/opensign/display</url-pattern>

    </servlet-mapping>


    <servlet>

        <servlet-name>OpenLogonVerifier</servlet-name>


<servlet-class>cn.langhua.opencms.openlogon.CmsOpenLogonVerifier</servlet-class>

    </servlet>

    <servlet-mapping>

        <servlet-name>OpenLogonVerifier</servlet-name>

        <url-pattern>/openlogon/verifier</url-pattern>

    </servlet-mapping>


    <servlet>

        <servlet-name>OpenLogonDisplay</servlet-name>


<servlet-class>cn.langhua.opencms.openlogon.CmsOpenLogonDisplay</servlet-class>

    </servlet>

    <servlet-mapping>

        <servlet-name>OpenLogonDisplay</servlet-name>

        <url-pattern>/openlogon/display</url-pattern>

    </servlet-mapping>


3. Restart OpenCms if needed.

4. Config /opensigndemo/opensign_configuration.xml if needed.

5. Run /opensigndemo/opensign.html

6. A real OpenCms OpenLogon sample
is /system/login/index_openlogon.html.

7. More configuration:
You can put a CRL pem file and cacert.pem under webapp/opencms/export/,
then the logon verifier will check whether the certificate is revoked
and whether the certificate is from the CA.
Besides, the module can have two parameters:
AutoUserRoleName: the user role name of an auto created user. No default
of this parameter.
AuthenticationHandler: the authentication handler, default is
cn.langhua.opencms.openlogon.CmsOpenLogonAuthenticationHandler.

8. Thanks
Thanks Commercial Cryptogram Research Center of China who sponsored this
release.


If you find any problems on this module, please send a email to me.

Regards,

Shi Yusen/Beijing Langhua Ltd.