Eygene Ryabinkin wrote:
> Vincenzo, good day.
Hi Eygene,
> But what can cause the following diagnostics in WMProxy logs,
> -----
> [Thu Jul 31 12:33:13 2008] [debug] ssl_engine_kernel.c(1165): Certificate Verifi
> cation: depth: 0, subject: /C=RU/O=RDIG/OU=users/OU=grid.kiae.ru/CN=Eygene Ryabi
> nkin atALICE/CN=1465040036, issuer: /C=RU/O=RDIG/OU=users/OU=grid.kiae.ru/CN=Eyg
> ene Ryabinkin atALICE
> [Thu Jul 31 12:33:13 2008] [error] Certificate Verification: Error (34): unhandl
> ed critical extension
This is the important message. It says that there is a critical
extension in the proxy, and OpenSSL is not prepared to handle it. With
a RFC proxy, this is most likely the ProxyCertInfo extension.
If you get this message, then WMproxy is not running against GT4, but
either GT2 or GT3, or alternatively is trying to link directly against
System OpenSSL < 0.9.8.
Ciao,
Vincenzo
> -----
> if octopus.grid.kiae.ru is gLite 3.1 WMS/LB host and I am using
> VOMS-enabled proxy with RFC extensions and trying to perform delegation?
>
> Thank you!
|