Hi all,
The certificate usefullness in validating a client cert is defined
by a just couple of things, the name of the Issuer and the keypair.
The first is listed as the SubjectDN in the cert, the second
one is essentially the X509v3 Subject Key Identifier, but the
modulus is a good measure of that as well, and can be extracted
easily form the certificate file:
openssl x509 -modulus -subject -noout -in
/etc/grid-security/certificates/01621954.0
(keeping in mind that the textual encoding of the emailAddress
component varies between OpenSSL 0.9.5 and 0.9.6).
This could be a good basis of the SFT tests.
DavidG.
Oliver KEEBLE wrote:
> But the situation is now that one certificate file (01621954.0) can have
> one of two valid checksums, depending on version. Can the SFTs can
> handle this case?
>
> Oliver Keeble Information Technology Department
> [log in to unmask] CERN
> +41 22 76 72360 CH-1211 Geneva 23
>
>
> Frederic Schaer wrote:
>
>> Hi,
>>
>> This is because the md5sums used by the SFT haven't been upgraded yet I
>> guess...
>> This will hopefully be done today
>>
>> - Piotr : maybe it would be good to find a way to compile these md5sums
>> on the fly ?
>>
>> Frederic
>>
>> Kyriakos G. Ginis a écrit :
>>
>>> On Fri, Apr 08, 2005 at 08:31:11AM +0200, Ricardo Graciani wrote:
>>>
>>>
>>>> Hi,
>>>>
>>>> This morning test reports the following error:
>>>>
>>>> Checking ca_UKeScience RPM: FAILED: rpm is ca_UKeScience-0.28-1,
>>>> checking the file itself (/etc/grid-security/certificates/01621954.0)
>>>> /etc/grid-security/certificates/01621954.0: FAILED
>>>> md5sum: WARNING: 1 of 1 computed checksum did NOT match
>>>>
>>>> I went to the machine where the test run and check with rpm
>>>> content:
>>>>
>>>> Everything looks OK with the files.
>>>>
>>>>
>>>
>>> Hi,
>>>
>>> On HG-01-GRNET we have exatly the same problem.
>>>
>>> --
>>> Kyriakos Ginis, PhD Candidate
>>> Software Engineering Laboratory
>>> National Technical University of Athens
>>>
>>>
>>>
--
David Groep
** National Institute for Nuclear and High Energy Physics, PDP/Grid group **
** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **
|