Dear all,
while checking one of the SE (classic) that have fail with SAM SRM testing
since '22-May-2008 10:07:50', i found that crl fetch from ca_CERN-TCA crl
url fail to pass verification process and the expiration date shift back
to May 1st:
--
# ls
1d879c6c.0 1d879c6c.crl_url 1d879c6c.info 1d879c6c.r0
1d879c6c.signing_policy fetch-crl fetch-crl.sh
# rm *.r0
rm: remove regular file `1d879c6c.r0'? y
[root@dpm01 j]# ./fetch-crl --loc . -out . --no-check-certificate
fetch-crl: [2008/05/22-14:43:01] Using OpenSSL version OpenSSL 0.9.7a Feb 19 2003 at /usr/bin/openssl
fetch-crl: [2008/05/22-14:43:01] processing './1d879c6c.crl_url'
fetch-crl: [2008/05/22-14:43:02] updating CRL 'CERN Trusted Certification Authority (1d879c6c)'
fetch-crl: [2008/05/22-14:43:02] verify failed for CA certificate issued by 'CERN Trusted Certification Authority (1d879c6c)' (/DC=ch/DC=cern/CN=CERN 20)
# grep Update *r0
Last Update: Apr 29 14:56:31 2008 GMT
Next Update: May 1 15:16:31 2008 GMT
while the other crl available at the other grid server nodes yet have been
updated and did have the correcr end time comparing with current trial.
any idea?
Br,
J
--
-----
Jason Shih, ASGC/OPS
Tel: +886-2-2788-0058 x1005 or 1006
Fax: +886-2-2789-6793
|