flog.fugu.de

Another note from Teldemokles: “User globus needs read/write permissions in the $GLOBUS_LOCATION dir!”
1. Creating a simple CA
setup simple CA
as globus:
$GLOBUS_LOCATION/setup/globus/setup-simple-ca
setup gsi things
as root:
$GLOBUS_LOCATION/setup/globus_simple_ca_#CAHASH#_setup/setup-gsi -default
or as globus: add
-nonroot
2. Obtaining and signing the host certificate - using the simple CA cert
request host certificate
as root:
grid-cert-request -host ‘my.host’
sign the host cert using the CA cert
as globus:
grid-ca-sign -in /etc/grid-security/hostcert_request.pem -out […]

Tekdemokles sagte neulich zu mir:
“Lieber fugu, falls Du jemals einen neuen simpleCA brauchen solltest, und Du bekommst folgende Meldung beim Verifizieren Deines Proxy-Zertifikates:
fugu@my_globus_host:/etc> grid-proxy-init -debug -verify
User Cert File: /home/fugu/.globus/usercert.pem
User Key File: /home/fugu/.globus/userkey.pem
Trusted CA Cert Dir: /home/fugu/.globus/certificates
Output File: /tmp/x509up_u2004
Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-my.globus.host/OU=globus.host/CN=fugu
Enter GRID pass phrase for this identity:
Creating proxy ……..++++++++++++
…++++++++++++
Done
Error: Couldn’t verify the authenticity of the […]