LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Jason Shih said:
> while dealing with transfer testing with other site (castor
> vs. dcache) we found one of the strange dn fetch in gridmap:
>
> # grep Zuzanna /etc/grid-security/grid-mapfile
> "/C=PL/O=GRID/O=PSNC/CN=Zuzanna K. cigacz" .dteam
Yes, there's a strange character in the DN (an S with an acute accent on
it I believe). There has been some debate about whether it's allowed,
but apparently Zuzanna has anyway been issued with a new certificate.
Stephen
PS It could be worse, the web page I pointed out yesterday says this:
There is nothing in any of these standards that
would
prevent me from including a 1 gigabit MPEG movie of
me
playing with my cat as one of the RDN components of
the DN
in my certificate.
-- Bob Jueneman on IETF-PKIX
(There is a certificate of this form
available from
http://www.cs.auckland.ac.nz/~pgut001/pubs/
{dave_ca|dave}.der, although the MPEG is
limited to
just over 1MB)
|