Hi David,
Thank you for this information...
I think we will discuss the CA test in Athens during the "Cic On Duty
meeting", so that future CA releases won't be a problem for the SFT suite...
Frederic
David Groep a écrit :
> Hi all,
>
> The certificate usefullness in validating a client cert is defined
> by a just couple of things, the name of the Issuer and the keypair.
> The first is listed as the SubjectDN in the cert, the second
> one is essentially the X509v3 Subject Key Identifier, but the
> modulus is a good measure of that as well, and can be extracted
> easily form the certificate file:
>
> openssl x509 -modulus -subject -noout -in
> /etc/grid-security/certificates/01621954.0
>
> (keeping in mind that the textual encoding of the emailAddress
> component varies between OpenSSL 0.9.5 and 0.9.6).
>
> This could be a good basis of the SFT tests.
>
> DavidG.
>
> Oliver KEEBLE wrote:
>
>> But the situation is now that one certificate file (01621954.0) can have
>> one of two valid checksums, depending on version. Can the SFTs can
>> handle this case?
>>
>> Oliver Keeble Information Technology Department
>> [log in to unmask] CERN
>> +41 22 76 72360 CH-1211 Geneva 23
>>
>>
>> Frederic Schaer wrote:
>>
>>> Hi,
>>>
>>> This is because the md5sums used by the SFT haven't been upgraded yet I
>>> guess...
>>> This will hopefully be done today
>>>
>>> - Piotr : maybe it would be good to find a way to compile these md5sums
>>> on the fly ?
>>>
>>> Frederic
>>>
>>> Kyriakos G. Ginis a écrit :
>>>
>>>> On Fri, Apr 08, 2005 at 08:31:11AM +0200, Ricardo Graciani wrote:
>>>>
>>>>
>>>>> Hi,
>>>>>
>>>>> This morning test reports the following error:
>>>>>
>>>>> Checking ca_UKeScience RPM: FAILED: rpm is ca_UKeScience-0.28-1,
>>>>> checking the file itself (/etc/grid-security/certificates/01621954.0)
>>>>> /etc/grid-security/certificates/01621954.0: FAILED
>>>>> md5sum: WARNING: 1 of 1 computed checksum did NOT match
>>>>>
>>>>> I went to the machine where the test run and check with rpm
>>>>> content:
>>>>>
>>>>> Everything looks OK with the files.
>>>>>
>>>>>
>>>>
>>>> Hi,
>>>>
>>>> On HG-01-GRNET we have exatly the same problem.
>>>>
>>>> --
>>>> Kyriakos Ginis, PhD Candidate
>>>> Software Engineering Laboratory
>>>> National Technical University of Athens
>>>>
>>>>
>>>>
>
>
> --
> David Groep
>
> ** National Institute for Nuclear and High Energy Physics, PDP/Grid
> group **
> ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam
> NL **
>
|