[kepler-dev] [Bug 3939] New: - Kepler Installer Unique key generation for KAR signing

[bugzilla-daemon at ecoinformatics.org]

http://bugzilla.ecoinformatics.org/show_bug.cgi?id=3939

           Summary: Kepler Installer Unique key generation for KAR signing
           Product: Kepler
           Version: 1.x dev
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: core
        AssignedTo: aschultz at nceas.ucsb.edu
        ReportedBy: aschultz at nceas.ucsb.edu
         QAContact: kepler-dev at kepler-project.org


The Kepler installer should generate a public/private key pair upon
installation. The private key is then used to digitally sign generated KARs
from that particular Kepler instance.  The public key is included inside the
KAR as a separate KAREntry.  This public key along with the locally generated
LSID will provide for determining the uniqueness of KARs regardless of internet
connectivity.