Hi Everyone,
I'm having trouble starting globus-gatekeeper.
This is what I've done...
I've placed my hostcert.pem and hostkey.pem files into
CE:/etc/grid-security directory and checked that /etc/globus.conf
is looking in the right place for the certificates:
x509_user_cert=/etc/grid-security/hostcert.pem
x509_user_key=/etc/grid-security/hostkey.pem
The e-Science host certificate (pkcs12) was converted using
openssl pkcs12 -in myhost.p12 -out myhost.pem
And myhost.pem contains the public/private keys for the host
and the CA public key; this file was split up into three
seperate pieces (hostcert.pem, hostkey.pem etc)
The UK e-Science CA rpm is installed on the CE. (ca_UKeScience-0.18-1.rpm)
Any help here would be much appreciated.
Dave.
[root@ce01 grid-security]# /sbin/service globus-gatekeeper start
Starting edg-gatekeeper:GSS failed getting server credentials:
GSS Major Status: General failure
GSS Minor Status Error Chain:
acquire_cred.c:125: gss_acquire_cred: Error with GSI credential
globus_i_gsi_gss_utils.c:1298: globus_i_gsi_gss_cred_read: Error with gss
credential handle
globus_gsi_credential.c:482: globus_gsi_cred_read: Error reading host
credential
globus_gsi_credential.c:1092: globus_gsi_cred_read_key: Error reading user
credential: Can't read credential's private key from PEM
OpenSSL Error: pem_lib.c:434: in library: PEM routines, function
PEM_do_header: bad password read
OpenSSL Error: pem_lib.c:666: in library: PEM routines, function
PEM_read_bio: no start lineFailure: GSS failed to get server credentials
|