Hi,
Ricardo Graciani wrote:
> Testing CEId: hik-lcg-ce.fzk.de
> GRAM Job submission failed because authentication failed:
> GSS Major Status: Authentication Failed
> GSS Minor Status Error Chain:
>
> init.c:499: globus_gss_assist_init_sec_context_async: Error during context
> initialization
> init_sec_context.c:189: gss_init_sec_context: Unable to verify remote
> side's credentials
> globus_i_gsi_gss_utils.c:851: globus_i_gsi_gss_handshake: SSLv3 handshake
> problems: Couldn't do ssl handshake
> OpenSSL Error: s3_clnt.c:840: in library: SSL routines, function
> SSL3_GET_SERVER_CERTIFICATE: certificate verify failed
> globus_gsi_callback.c:351: globus_i_gsi_callback_handshake_callback: Could
> not verify credential
> globus_gsi_callback.c:468: globus_i_gsi_callback_cred_verify: Could not
> verify credential
> globus_gsi_callback.c:745: globus_i_gsi_callback_check_revoked: Invalid
> CRL: The available CRL has expired (error code 7)
Sorry about this. I don't know what happend, but somehow an old CRL
was available from the web. The CA administrator just replaced it
with a valid CRL. And it seems to work, at least locally. If you want
to send jobs to FZK, you have to get that new CRL, either manually or
wait until cron does it for you.
Peer
--
Dr. Peer Hasselmeyer [log in to unmask]
Forschungszentrum Karlsruhe Tel.: +49-7247-828601
Institute for Scientific Computing / Inst. f. Wissenschaftliches Rechnen
Hermann-von-Helmholtz-Platz 1, 76344 Eggenstein-Leopoldshafen, Germany
|