On Thu, Sep 01, 2005 at 02:46:12PM +0100, Burke, S (Stephen) wrote:
> Testbed Support for GridPP member institutes
> > [mailto:[log in to unmask]] On Behalf Of Mark Nelson said:
> > My mon box log shows the following, I didn't have any lcg CA rpms on
> > there, I've added this using the command yum install lcg-CA,
> > there is a
> > line in the log that refers to a hostcert.pem, does the monbox need a
> > host certificate, I was under the impresssion that only a CE ClassicSE
> > and SRM needed a certificate.
>
> We are changing to a secure version of R-GMA which does need a host
> certificate. The version in 2.6 still operates insecurely by default and
> in theory doesn't have to have a certificate, but I think the default
> setup may now require it. In any case it will be required soon so you
> may as well get one.
>
> Stephen
In 2.7 we will recommend that the YAIM modules set the clients to use
the secure connections and finally in 2.8 we can close the insecure
connections.
This does mean that secure connections need setting up now.
Steve
|