Hi Alessandro,
This message is not critical in itself (it just indicates that you run
fetch-crl without the default warning suppress option "-a 24"). The
failure to download the NECTEC CRL does not in itself result in a
critical condition -- until the CRL expires.
And then your problems will be limited to interactions with users and
services associated with the NECTEC CA (i.e. those being in or originating
from Thailand).
BTW: at the moment I can happily retrieve this CRL from the URL mentioned.
Are you sure there are no other local network issues? The error messages
mentioned and the inability to run jobs are (should be) unrelated.
Cheers,
DavidG.
Italiano Alessandro wrote:
> we are encountering the following problem
>
> fetch-crl[9108]: 20071106T182248+0100 processing
> '/etc/grid-security/certificates/8a047de1.crl_url'
> fetch-crl[9108]: 20071106T182318+0100 RetrieveFileByURL: download no
> data from http://gridca.hpcc.nectec.or.th/pub/crl/cacrl.crl
> fetch-crl[9108]: 20071106T182318+0100 downloaded file from
> http://gridca.hpcc.nectec.or.th/pub/crl/cacrl.crl is not a valid CRL file
> fetch-crl[9108]: 20071106T182318+0100 Could not download any CRL from
> /etc/grid-security/certificates/8a047de1.crl_url:
> fetch-crl[9108]: 20071106T182318+0100 download failed from
> 'http://gridca.hpcc.nectec.or.th/pub/crl/cacrl.crl'
> fetch-crl[9108]: 20071106T182318+0100 download for
> http://gridca.hpcc.nectec.or.th/pub/crl/cacrl.crl is not valid and none
> of the URLs in '/etc/grid-security/certificates/8a047de1.crl_url' is
> operational
>
>
> All the jobs via GRID are failing
>
> is it a common problem ???
>
> Alessandro Italiano
--
David Groep
** National Institute for Nuclear and High Energy Physics, PDP/Grid group **
** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **
|