* Motivation -- security, access, religion ** The Lynx web browser is a highly popular text based web browser. ** People use it because... ** Web is being used increasingly for sensitive transactions. ** Enter SSL: *** Server Auth *** Client Auth -- certificates ** Lynx + SSL = secure access for many ** Athena WebSIS * Design -- athena, lynx compat, SSLeay ** LC designed to be similar to existing lynx features. based on Cookie Jar, file downloads. Based on a patched version of lynx 2.7.1. ** LC uses SSLeay-0.8.1, a poorly documented library. ** Added code surrounded by ifdefs. * Other info to present: ** http://web.mit.edu/wwwdev/www/lynx-cert/ ** Certificate Data *** External (disk) storage format *** Internal storage format ** Private Key info ** Handling of https connections -- callbacks. ** Request handling: LYNXCERT:/ *** TRUST, WARN, DELETE, ADD-CA, CHANGEPW / CERTIFY, DISPLAY, null. ** application/x-x509-foo-cert handling * Usage Walk Through. Use paco or sipbtest. ** Start afresh. (Using menus) ** Get the MIT CA. ** Connect to bozo --- show how it behaves. ** Get MIT client cert. ** Connect to Ops5? student.mit.edu? ** Demonstrate certificate management. * Status ** Mostly complete. ** Redesign of private key system to work around problems ** Redesign of verification callbacks. * Questions?