Hi Gustav
When was the last time this worked for you? There was a VOMS upgrade at Manchester last week (24th) which may have had an impact.
Jeremy
On 31 May 2011, at 14:53, Gustav Wikström wrote:
> Hi,
>
> I'm having problems with getting a proxy, I get:
>
>
> [lwikstro@atlas002]/neutrino/data1/t2k/software% voms-proxy-init
> -debug -voms t2k.org:/t2k.org/Role=production
> Detected Globus version: 22
> Unspecified proxy version, settling on Globus version: 2
> Number of bits in key :1024
> Loading configuration file /afs/cern.ch/user/l/lwikstro/.glite/vomses
> Loading configuration file
> /neutrino/data1/t2k/software/glite-3.2/glite/etc/vomses
> Files being used:
> CA certificate file: none
> Trusted certificates directory :
> /neutrino/data1/t2k/software/glite-3.2/certificates
> Proxy certificate file : /tmp/x509up_u51898
> User certificate file: /afs/cern.ch/user/l/lwikstro/.globus/usercert.pem
> User key file: /afs/cern.ch/user/l/lwikstro/.globus/userkey.pem
> Output to /tmp/x509up_u51898
> Enter GRID pass phrase:
> Your identity: /DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=lwikstro/CN=627993/CN=Gustav Wikstrom
> Using configuration file /afs/cern.ch/user/l/lwikstro/.glite/vomses
> Using configuration file /neutrino/data1/t2k/software/glite-3.2/glite/etc/vomses
> Loading configuration file /afs/cern.ch/user/l/lwikstro/.glite/vomses
> Loading configuration file
> /neutrino/data1/t2k/software/glite-3.2/glite/etc/vomses
> Creating temporary proxy to /tmp/tmp_x509up_u51898_16913 ..........++++++
> ...........++++++
> Done
> Contacting voms.gridpp.ac.uk:15003
> [[log in to unmask]]
> "t2k.org" Failed
>
> Error: Error during SSL handshake:Either proxy or user certificate are expired.
>
> Trying next server for t2k.org.
> Creating temporary proxy to /tmp/tmp_x509up_u51898_16913
> .................................++++++
> ..++++++
> Done
> Contacting voms.gridpp.ac.uk:15003
> [[log in to unmask]]
> "t2k.org" Failed
>
> Error: Error during SSL handshake:Either proxy or user certificate are expired.
>
> None of the contacted servers for t2k.org were capable
> of returning a valid AC for the user.
>
>
>
> I don't know what to do about this. I've checked that my certificate
> (from CERN CA) is valid to August. I recently replaced the lcg-CA
> certificates with the EGI ones, but I have been able to run after that
> change. Do I have to replace my certificate as well?
> Is this a general problem at the moment or is it just me?
>
> Cheers,
> Gustav
|