Hi,
i am having a look on it, i do not understand where that problem could come from,
the CRL was updated several days ago (and it will be updated again this afternoon,
one week before expiration)
i tryed the CRL update with edg-fetch-crl ten minutes ago and i obtained the old CRL !
i tryed it again five minutes ago and the CRL is ok now ....
could it be maybe a http proxy problem somewhere ? i have to investigate...
Rafa
----- Original Message -----
From: Frederic Schaer <[log in to unmask]>
Date: Friday, February 4, 2005 5:05 pm
Subject: Re: [LCG-ROLLOUT] Job submission tests failing in Spain
> Hmmm I was quick : I manually downloaded the file and checked it :
> it's
> OK now, but all machines with the old one will go on failing until
> they
> download it (6 hours max then...)
> The output from the ressource broker is "likely" to be available,
> but if
> the CRL expired before the output was retrieved, then the RB might
> have
> failed downloading the jobs outputs (beeing unable to accept the
> Spain
> CE certificate because of this CRL)...
>
> see the 2 different CRLs I found : it seems the CA released a new
> CRL
> earlier (end of january), but the file may have been put online
> too late
> (I checked on several nodes : some did have the new file, the
> others not...)
>
> Frederic
>
> NEW ONE :
>
> >$ openssl crl -in 13eab55e.r0
> -text
>
>
> Certificate Revocation List (CRL):
> Version 1 (0x0)
> Signature Algorithm: md5WithRSAEncryption
> Issuer: /C=ES/O=DATAGRID-ES/CN=DATAGRID-ES CA
> Last Update: Jan 26 11:57:38 2005 GMT
> Next Update: Feb 10 11:57:38 2005 GMT
> Revoked Certificates:
> Serial Number: B4
> Revocation Date: Nov 12 16:10:59 2004 GMT
> Serial Number: B5
> Revocation Date: Nov 12 16:11:08 2004 GMT
> Signature Algorithm: md5WithRSAEncryption
> -----END X509 CRL-----
>
> OLD ONE :
>
> >$ openssl crl -in /etc/grid-security/certificates/13eab55e.r0
> -text
> Certificate Revocation List (CRL):
> Version 1 (0x0)
> Signature Algorithm: md5WithRSAEncryption
> Issuer: /C=ES/O=DATAGRID-ES/CN=DATAGRID-ES CA
> Last Update: Jan 18 13:00:41 2005 GMT
> Next Update: Feb 2 13:00:41 2005 GMT
> Revoked Certificates:
> Serial Number: B4
> Revocation Date: Nov 12 16:10:59 2004 GMT
> Serial Number: B5
> Revocation Date: Nov 12 16:11:08 2004 GMT
> Signature Algorithm: md5WithRSAEncryption
>
> -----END X509 CRL-----
>
> Eduardo Huedo Cuesta a écrit :
>
> > But, anyway, the output from the resource broker should be
> obtained...
> > and it is not.
> >
> > LHC Computer Grid - Rollout wrote:
> >
> >> On Fri, Feb 04, 2005 at 03:08:16PM -0000 or thereabouts,
> Frederic Schaer
> >> wrote:
> >>
> >>
> >>> Hi,
> >>>
> >>> from what I see, it seems the Spanish CRLs expired on Febrary
> 2nd ...
> >>> I'll contact them and tell the current CIC on duty about that...
> >>>
> >>
> >>
> >> Hi,
> >>
> >> I don't see this
> >>
> >> The Spain CRL currently has
> >>
> >> Last Update: Jan 26 11:57:38 2005 GMT
> >> Next Update: Feb 10 11:57:38 2005 GMT
> >>
> >> It could of course be the submission UI that is not updating them
> >> though.
> >>
> >> Steve
> >>
> >>
> >>
> >>> Regards,
> >>>
> >>> Frederic Schaer
> >>> CIC on Duty France
> >>>
> >>> Eduardo Huedo Cuesta a écrit :
> >>>
> >>>
> >>>
> >>>> Dear all,
> >>>>
> >>>> Anyone knows what happens with the job submission tests in
> Spain? They
> >>>> are all failing!
> >>>> Also, RSS feeds are reporting failures since yesterday, even
> though>>>> TestZone reports are (more or less) OK!
> >>>> I think that monitoring jobs are not being submitted to
> Spanish sites.
> >>>> For example, the page
> >>>>
> >>>>
> >>>
> >> http://goc.grid-support.ac.uk/gridsite/status/edg-
> output.php?rb=CERN_lxn1188&hn=INTA-CAB.ce00.inta.es
> >>
> >>
> >>
> >>
> >>>> only shows the title "EDG-JOB-SUBMIT STDOUT" with no output.
> >>>>
> >>>> Regards,
> >>>>
> >>>> Eduardo.
> >>>>
> >>>>
> >>>
> >>
> >> --
> >> Steve Traylen
> >> [log in to unmask]
> >> http://www.gridpp.ac.uk/
> >>
> >>
> >>
> >>
> >
>
|