Testbed Support for GridPP member institutes
> [mailto:[log in to unmask]] On Behalf Of Matt Doidge said:
> Is there
> an openssl (or similar) incantation that would allow us to
> check if the cert and key match?
You could try voms-proxy-init -verify, I'm not sure exactly what it
checks but it spots my non-upgraded cert:
voms-proxy-init -verify
Enter GRID pass phrase:
Your identity: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=stephen burke
Error: verify failed.
outdated CRL found, revoking all certs till you get new CRL
Function: verify_callback
certificate failed verify:
error =CRL has expired
subject=/C=UK/O=eScienceRoot/OU=Authority/L=Root/CN=CA
issuer =/C=UK/O=eScienceRoot/OU=Authority/L=Root/CN=CA
Function: verify_callback
Stephen
|