Evaluating Trust in Grid Certificates

TL;DR

This paper presents a practical tool for evaluating the trustworthiness of X.509 certificates used in grid computing, ensuring compliance with established profiles and policies to enhance security in e-Science projects.

Contribution

It introduces a program and test suites for verifying grid certificates against the Grid Certificate Profile, aiding trust decisions in grid security infrastructures.

Findings

The tool effectively checks certificates for profile compliance.

It supports secure international grid collaborations.

Enhances trust management in e-Science data sharing.

Abstract

Digital certificates are used to secure international computation and data storage grids used for e-Science projects, like the Worldwide Large Hadron Collider Computing Grid. The International Grid Trust Federation has defined the Grid Certificate Profile: a set of guidelines for digital certificates used for grid authentication. We have designed and implemented a program and related test suites for checking X.509 certificates against the certificate profiles and policies relevant for use on the Grid. The result is a practical tool that assists implementers and users of public key infrastructures to reach appropriate trust decisions.