Hi Frederic,
i checked the crl file was copied to the web server on Jan 26,
-rw-r--r-- 1 rmarco root 638 Jan 26 17:14 13eab55e.r0
so, there was no delay putting it online
Rafa
----- Original Message -----
From: Rafael Marco de Lucas <[log in to unmask]>
Date: Friday, February 4, 2005 6:00 pm
Subject: Re: [LCG-ROLLOUT] Job submission tests failing in Spain
> Hi,
>
> i am having a look on it, i do not understand where that problem
> could come from,
> the CRL was updated several days ago (and it will be updated again
> this afternoon,
> one week before expiration)
> i tryed the CRL update with edg-fetch-crl ten minutes ago and i
> obtained the old CRL !
> i tryed it again five minutes ago and the CRL is ok now ....
> could it be maybe a http proxy problem somewhere ? i have to
> investigate...
> Rafa
>
> ----- Original Message -----
> From: Frederic Schaer <[log in to unmask]>
> Date: Friday, February 4, 2005 5:05 pm
> Subject: Re: [LCG-ROLLOUT] Job submission tests failing in Spain
>
> > Hmmm I was quick : I manually downloaded the file and checked it
> :
> > it's
> > OK now, but all machines with the old one will go on failing
> until
> > they
> > download it (6 hours max then...)
> > The output from the ressource broker is "likely" to be
> available,
> > but if
> > the CRL expired before the output was retrieved, then the RB
> might
> > have
> > failed downloading the jobs outputs (beeing unable to accept the
> > Spain
> > CE certificate because of this CRL)...
> >
> > see the 2 different CRLs I found : it seems the CA released a
> new
> > CRL
> > earlier (end of january), but the file may have been put online
> > too late
> > (I checked on several nodes : some did have the new file, the
> > others not...)
> >
> > Frederic
> >
> > NEW ONE :
> >
> > >$ openssl crl -in 13eab55e.r0
> > -text
>
> >
> >
> > Certificate Revocation List (CRL):
> > Version 1 (0x0)
> > Signature Algorithm: md5WithRSAEncryption
> > Issuer: /C=ES/O=DATAGRID-ES/CN=DATAGRID-ES CA
> > Last Update: Jan 26 11:57:38 2005 GMT
> > Next Update: Feb 10 11:57:38 2005 GMT
> > Revoked Certificates:
> > Serial Number: B4
> > Revocation Date: Nov 12 16:10:59 2004 GMT
> > Serial Number: B5
> > Revocation Date: Nov 12 16:11:08 2004 GMT
> > Signature Algorithm: md5WithRSAEncryption
> > -----END X509 CRL-----
> >
> > OLD ONE :
> >
> > >$ openssl crl -in /etc/grid-security/certificates/13eab55e.r0
> > -text
> > Certificate Revocation List (CRL):
> > Version 1 (0x0)
> > Signature Algorithm: md5WithRSAEncryption
> > Issuer: /C=ES/O=DATAGRID-ES/CN=DATAGRID-ES CA
> > Last Update: Jan 18 13:00:41 2005 GMT
> > Next Update: Feb 2 13:00:41 2005 GMT
> > Revoked Certificates:
> > Serial Number: B4
> > Revocation Date: Nov 12 16:10:59 2004 GMT
> > Serial Number: B5
> > Revocation Date: Nov 12 16:11:08 2004 GMT
> > Signature Algorithm: md5WithRSAEncryption
> >
> > -----END X509 CRL-----
> >
> > Eduardo Huedo Cuesta a écrit :
> >
> > > But, anyway, the output from the resource broker should be
> > obtained...
> > > and it is not.
> > >
> > > LHC Computer Grid - Rollout wrote:
> > >
> > >> On Fri, Feb 04, 2005 at 03:08:16PM -0000 or thereabouts,
> > Frederic Schaer
> > >> wrote:
> > >>
> > >>
> > >>> Hi,
> > >>>
> > >>> from what I see, it seems the Spanish CRLs expired on
> Febrary
> > 2nd ...
> > >>> I'll contact them and tell the current CIC on duty about that...
> > >>>
> > >>
> > >>
> > >> Hi,
> > >>
> > >> I don't see this
> > >>
> > >> The Spain CRL currently has
> > >>
> > >> Last Update: Jan 26 11:57:38 2005 GMT
> > >> Next Update: Feb 10 11:57:38 2005 GMT
> > >>
> > >> It could of course be the submission UI that is not updating
> them
> > >> though.
> > >>
> > >> Steve
> > >>
> > >>
> > >>
> > >>> Regards,
> > >>>
> > >>> Frederic Schaer
> > >>> CIC on Duty France
> > >>>
> > >>> Eduardo Huedo Cuesta a écrit :
> > >>>
> > >>>
> > >>>
> > >>>> Dear all,
> > >>>>
> > >>>> Anyone knows what happens with the job submission tests in
> > Spain? They
> > >>>> are all failing!
> > >>>> Also, RSS feeds are reporting failures since yesterday,
> even
> > though>>>> TestZone reports are (more or less) OK!
> > >>>> I think that monitoring jobs are not being submitted to
> > Spanish sites.
> > >>>> For example, the page
> > >>>>
> > >>>>
> > >>>
> > >> http://goc.grid-support.ac.uk/gridsite/status/edg-
> > output.php?rb=CERN_lxn1188&hn=INTA-CAB.ce00.inta.es
> > >>
> > >>
> > >>
> > >>
> > >>>> only shows the title "EDG-JOB-SUBMIT STDOUT" with no output.
> > >>>>
> > >>>> Regards,
> > >>>>
> > >>>> Eduardo.
> > >>>>
> > >>>>
> > >>>
> > >>
> > >> --
> > >> Steve Traylen
> > >> [log in to unmask]
> > >> http://www.gridpp.ac.uk/
> > >>
> > >>
> > >>
> > >>
> > >
> >
>
|