svn commit: r43512 - head/en_US.ISO8859-1/htdocs/news/status

Tue Jan 14 17:14:00 UTC 2014

Author: pgj
Date: Tue Jan 14 17:13:59 2014
New Revision: 43512
URL: http://svnweb.freebsd.org/changeset/doc/43512

Log:
  - Add 2013Q4 report on auditdistd(8)
  
  Submitted by:	pjd

Modified:
  head/en_US.ISO8859-1/htdocs/news/status/report-2013-10-2013-12.xml

Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2013-10-2013-12.xml
==============================================================================

--- head/en_US.ISO8859-1/htdocs/news/status/report-2013-10-2013-12.xml	Tue Jan 14 17:04:54 2014	(r43511)
+++ head/en_US.ISO8859-1/htdocs/news/status/report-2013-10-2013-12.xml	Tue Jan 14 17:13:59 2014	(r43512)
@@ -19,7 +19,7 @@
 
     <!-- XXX: Keep updating the number of entries -->
     <p>Thanks to all the reporters for the excellent work!  This report
-      contains 25 entries and we hope you enjoy reading it.</p>
+      contains 26 entries and we hope you enjoy reading it.</p>
 
     <p>The deadline for submissions covering between January and
       March 2014 is April 7th, 2014.</p>
@@ -1415,4 +1415,36 @@ device vt_vga</pre>
       <p>The work was sponsored by The &os; Foundation.</p>
     </body>
   </project>
+
+  <project cat='bin'>
+    <title>auditdistd(8)</title>
+
+    <contact>
+      <person>
+	<name>
+	  <given>Pawel Jakub</given>
+	  <common>Dawidek</common>
+	</name>
+	<email>pjd at FreeBSD.org</email>
+      </person>
+    </contact>
+
+    <body>
+      <p>The <tt>auditdistd(8)</tt> daemon is responsible for
+	distributing audit trail files over TCP/IP network securely and
+	reliably.  Currently, the daemon uses Transport Layer Security
+	(TLS) for communication, but only server-side certificates are
+	verified, based on the certificate's fingerprint.  The ongoing
+	work will make it possible to use client-side certificates and
+	will support more complete public-key infastructure, which
+	includes validation of the entire certificate chain, including
+	revocation checking against Certification Revocation Lists at
+	every level.  From now on, <tt>auditdistd(8)</tt> will support
+	TLSv1.2 and PFS modes only.  In addition, it will be possible to
+	send audit trail files to multiple receivers.</p>
+
+      <p>The work is sponsored by The &os; Foundation and will be
+	completed at the beginning of February 2014.</p>
+    </body>
+  </project>
 </report>
