Thursday, January 19, 2012
identity page of Peter Williams
This post demonstrates how I can use a Blogspot hosted blog post to store Identity oriented claims that mirror those in my local keychain hosted x.509 certificate. The steps for achieving this are as follows:
- Write post -- this creates the place holder your claims
- Publish post -- this gets you a URL for the location of your claims
- Generate Certificate -- using a generator of your choice [1][2] generate an x.509 certificate with a WebID watermark in the subjectAlternateName slot using an HTTP scheme URI based Name of the form: {Blog-Post-Permalink}#this e.g., http://kidehen.blogspot.com/2012/01/hcard-inside-post-as-identity-provider.html#this
- Then return to your blog post and insert a hCard snippet that mirrors the identity claims in the x.509 certificate you've just generated (see snippet template and example further down)
- Save and publish blog post
- Use a WebID verifier [3][4] to verify you WebID i.e., lookup your Blog post for the claims made in your x.509 certificate (specifically, that your WebID identifies the Subject of the Certificate)
- Done!
hCard Template:
<div id="hcard" class="vcard">
<a class="url fn" href="{WebID}">@kidehen (BrowerID 2)</a>
<a class="email" href="{mailto: URI}">{Email-Address}</a>
<a class="key" href="{data: URI for Public Key in DER}">Public Key</a>
<a class="key" href="{Certificate URL}">Public Key Ref</a>
</div>
Excerpts from actual hCard snippet embedded in this post:
Subscribe to:
Post Comments (Atom)
About Me
- peter williams
0 comments:
Post a Comment