Hi Elena,
you have the "CA 2B" in VOMRS, I can see it, but it's not the primary
certificate. It didn't affect me this morning. You might want to start
from the top of the site
https://lcg-voms.cern.ch:8443/vo/atlas/vomrs
and then click on "certificates" on the left hand bar.
cheers
alessandra
On 30/10/2012 13:07, Elena Korolkova wrote:
> On 30 Oct 2012, at 12:51, Steve Traylen wrote:
>
>> On Oct 30, 2012, at 1:45 PM, Elena Korolkova wrote:
>>
>>> Hi Steve
>>>
>>> I have two questions:
>>>
>>> 1. should I do anything about that
>>>
>> Hopefully all should be good.
>>
>> Check in voms or vomrs that you still have a valid identity and that it corresponds to the identity on you have on disk.
>>
>> Where your identity is your (DN, CA DN) pair.
>>
>> Chances are if you run
>>
>> openssl x509 -in ~/.globus/usercert.pem -noout -issuer
> I have
> openssl x509 -in ~/.globus/usercert.pem -noout -issuer
> issuer= /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B
>
> I can generate proxy but I can't access https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute.
>
> Secure Connection Failed
> An error occurred during a connection to lcg-voms.cern.ch:8443.
> SSL peer cannot verify your certificate.
>
> (Error code: ssl_error_bad_cert_alert)
>
>
> Thanks
> Elena
>
>> now and you get the 2B CA DN then everything is going to fine since you are already using that identity and the mail
>> has nothing to do with that identity.
>>
>>> 2. if many atlas users got such emails, as Wahid said it would be better to send email to the users explanation.
>>>
>> Makes sense for the UK to do that for sure. :-)
>>
>>
>>
>>
>>> Many thanks
>>>
>>> Elena
>>>
>>> On 30 Oct 2012, at 12:40, Steve Traylen wrote:
>>>
>>>> On Oct 30, 2012, at 1:38 PM, Elena Korolkova wrote:
>>>>
>>>>> I don't understand why it happens now. I was pretty sure that the problem was solved last year. There was several tickets and AFAIR the problem was discussed at WLCG.
>>>>> And we are here again.
>>>>>
>>>> If anythign your new identity was added automatically which you may not actually have had
>>>> your self at the time , the old identity was not touched.
>>>>
>>>> This is hopefully just your old identity expiring and not your only identity.
>>>>
>>>> Steve.
>>>>
>>>>> Elena
>>>>>
>>>>>
>>>>> On 30 Oct 2012, at 12:34, Alessandra Forti wrote:
>>>>>
>>>>>> All the atlas UK users have received it - Alessandro will have a field day unswering everyone. It's the old CA expiring. You should have a certificate with "CA 2B" in the VOMRS.
>>>>>>
>>>>>> You can check it here
>>>>>>
>>>>>> https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute
>>>>>>
>>>>>> cheers
>>>>>> alessandra
>>>>>>
>>>>>> On 30/10/2012 12:20, Elena Korolkova wrote:
>>>>>>> Hello
>>>>>>>
>>>>>>> I've got email from atlas (I'll contact atlas later) that my certificate is changed to expired.
>>>>>>>> Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>>>
>>>>>>> The certificate itself valid until 05.01.2013.
>>>>>>>
>>>>>>> Any idea why?
>>>>>>>
>>>>>>> Many thanks
>>>>>>> Elena
>>>>>>>
>>>>>>>
>>>>>>> Begin forwarded message:
>>>>>>>
>>>>>>>> From: <[log in to unmask]>
>>>>>>>> Date: 30 October 2012 09:08:58 GMT
>>>>>>>> To: <[log in to unmask]>
>>>>>>>> Subject: Automatic Notification from atlas VOMRS: Your certificate status has changed
>>>>>>>>
>>>>>>>> Dear VO Member,
>>>>>>>> The status of your certificate
>>>>>>>> DN: /C=UK/O=eScience/OU=Sheffield/L=CICS/CN=elena korolkova
>>>>>>>> CA: /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
>>>>>>>> has been changed from Approved to Expired due to following reason: Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>>> The change was made by a VOMRS CA Validation Processor
>>>>>>>> DN: /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
>>>>>>>> CA: /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>>>>>> Please contact VO administrator if you have any questions.
>>>>>>>>
>>>>>>>> VOMRS atlas Service
>>>>>>>>
>>>>>>> __________________________________________________
>>>>>>> Dr Elena Korolkova
>>>>>>> Email: [log in to unmask]
>>>>>>> Tel.: +44 (0)114 2223553
>>>>>>> Fax: +44 (0)114 2223555
>>>>>>> Department of Physics and Astronomy
>>>>>>> University of Sheffield
>>>>>>> Sheffield, S3 7RH, United Kingdom
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> --
>>>>>> Facts aren't facts if they come from the wrong people. (Paul Krugman)
>>>>>>
>>>>> __________________________________________________
>>>>> Dr Elena Korolkova
>>>>> Email: [log in to unmask]
>>>>> Tel.: +44 (0)114 2223553
>>>>> Fax: +44 (0)114 2223555
>>>>> Department of Physics and Astronomy
>>>>> University of Sheffield
>>>>> Sheffield, S3 7RH, United Kingdom
>>> __________________________________________________
>>> Dr Elena Korolkova
>>> Email: [log in to unmask]
>>> Tel.: +44 (0)114 2223553
>>> Fax: +44 (0)114 2223555
>>> Department of Physics and Astronomy
>>> University of Sheffield
>>> Sheffield, S3 7RH, United Kingdom
> __________________________________________________
> Dr Elena Korolkova
> Email: [log in to unmask]
> Tel.: +44 (0)114 2223553
> Fax: +44 (0)114 2223555
> Department of Physics and Astronomy
> University of Sheffield
> Sheffield, S3 7RH, United Kingdom
--
Facts aren't facts if they come from the wrong people. (Paul Krugman)
|