hi Daniela,
If you're installing from the tarball lcg-CA then you will need to
delete any "disappeared" CAs as well.
This is a valid error from SAM, since only CAs included in the lcg-CA
package should be trusted by your site.
It does make installing from the non-rpm a little annoying, I agree.
Sam
2009/8/5 Daniela Bauer <[log in to unmask]>:
> Hi,
>
> I tried asking the SAM people, but is this a real error or a problem
> with the SAM test ?
>
> I see this error:
>
> ca_HellasGrid-CA-2006 : OK - detected version is 1.31
> ca_BEGrid : WARNING !
> CA has disappeared in the latest CAs release. You have to remove it!
>
>
> I assume what happened here is that (as this is a tar ball) lcg-CA
> got updated by unpacking the rpm somewhere and then doing a
> cp new_certs/* old_certs/.
>
> hence no CAs have been removed.
>
> (because this is basically what we do for the storage nodes here,
> where the certificates are in svn).
>
> Do I really need to care about a bunch of obsolete CAs lying around or
> should I ask for the SAM test to be adapted ?
>
> Daniela
>
> --
> -----------------------------------------------------------
> HEP Group
> Physics Dep
> Imperial College
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
|