I had several certificates in my browser (Firefox).
Now I keep only my own.
I can access https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute
The problem is solved.
Sorry for the noise and many thanks for your help.
Elena
On 30 Oct 2012, at 14:06, Steve Traylen wrote:
> On Oct 30, 2012, at 2:44 PM, Alessandra Forti wrote:
>
>> Hi Elena,
>>
>> you have the "CA 2B" in VOMRS, I can see it, but it's not the primary certificate. It didn't affect me this morning. You might want to start from the top of the site
>>
>
>> https://lcg-voms.cern.ch:8443/vo/atlas/vomrs
>>
>
> This is good advice
>
> But also looking in the trustmanager logs of vomrs I can see no connections from your DN.
> This is with be looking for 'korolkova'
>
> It is as if you were not presenting your certificate to the service for whatever reason?
>
> If still a problem please tell me your browser (in particular safari is tricky) and your
> ip address.
>
> Also please validate yourself with another service. e.g
>
> https://www.gridpp.ac.uk/
>
> will tell you at the foot of the page who you are.
>
> Steve
>
>
>> and then click on "certificates" on the left hand bar.
>>
>> cheers
>> alessandra
>>
>> On 30/10/2012 13:07, Elena Korolkova wrote:
>>> On 30 Oct 2012, at 12:51, Steve Traylen wrote:
>>>
>>>> On Oct 30, 2012, at 1:45 PM, Elena Korolkova wrote:
>>>>
>>>>> Hi Steve
>>>>>
>>>>> I have two questions:
>>>>>
>>>>> 1. should I do anything about that
>>>>>
>>>> Hopefully all should be good.
>>>>
>>>> Check in voms or vomrs that you still have a valid identity and that it corresponds to the identity on you have on disk.
>>>>
>>>> Where your identity is your (DN, CA DN) pair.
>>>>
>>>> Chances are if you run
>>>>
>>>> openssl x509 -in ~/.globus/usercert.pem -noout -issuer
>>> I have
>>> openssl x509 -in ~/.globus/usercert.pem -noout -issuer
>>> issuer= /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B
>>>
>>> I can generate proxy but I can't access https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute.
>>>
>>> Secure Connection Failed
>>> An error occurred during a connection to lcg-voms.cern.ch:8443.
>>> SSL peer cannot verify your certificate.
>>>
>>> (Error code: ssl_error_bad_cert_alert)
>>>
>>>
>>> Thanks
>>> Elena
>>>
>>>> now and you get the 2B CA DN then everything is going to fine since you are already using that identity and the mail
>>>> has nothing to do with that identity.
>>>>
>>>>> 2. if many atlas users got such emails, as Wahid said it would be better to send email to the users explanation.
>>>>>
>>>> Makes sense for the UK to do that for sure. :-)
>>>>
>>>>
>>>>
>>>>
>>>>> Many thanks
>>>>>
>>>>> Elena
>>>>>
>>>>> On 30 Oct 2012, at 12:40, Steve Traylen wrote:
>>>>>
>>>>>> On Oct 30, 2012, at 1:38 PM, Elena Korolkova wrote:
>>>>>>
>>>>>>> I don't understand why it happens now. I was pretty sure that the problem was solved last year. There was several tickets and AFAIR the problem was discussed at WLCG.
>>>>>>> And we are here again.
>>>>>>>
>>>>>> If anythign your new identity was added automatically which you may not actually have had
>>>>>> your self at the time , the old identity was not touched.
>>>>>>
>>>>>> This is hopefully just your old identity expiring and not your only identity.
>>>>>>
>>>>>> Steve.
>>>>>>
>>>>>>> Elena
>>>>>>>
>>>>>>>
>>>>>>> On 30 Oct 2012, at 12:34, Alessandra Forti wrote:
>>>>>>>
>>>>>>>> All the atlas UK users have received it - Alessandro will have a field day unswering everyone. It's the old CA expiring. You should have a certificate with "CA 2B" in the VOMRS.
>>>>>>>>
>>>>>>>> You can check it here
>>>>>>>>
>>>>>>>> https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute
>>>>>>>>
>>>>>>>> cheers
>>>>>>>> alessandra
>>>>>>>>
>>>>>>>> On 30/10/2012 12:20, Elena Korolkova wrote:
>>>>>>>>> Hello
>>>>>>>>>
>>>>>>>>> I've got email from atlas (I'll contact atlas later) that my certificate is changed to expired.
>>>>>>>>>> Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>>>>>
>>>>>>>>> The certificate itself valid until 05.01.2013.
>>>>>>>>>
>>>>>>>>> Any idea why?
>>>>>>>>>
>>>>>>>>> Many thanks
>>>>>>>>> Elena
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Begin forwarded message:
>>>>>>>>>
>>>>>>>>>> From: <[log in to unmask]>
>>>>>>>>>> Date: 30 October 2012 09:08:58 GMT
>>>>>>>>>> To: <[log in to unmask]>
>>>>>>>>>> Subject: Automatic Notification from atlas VOMRS: Your certificate status has changed
>>>>>>>>>>
>>>>>>>>>> Dear VO Member,
>>>>>>>>>> The status of your certificate
>>>>>>>>>> DN: /C=UK/O=eScience/OU=Sheffield/L=CICS/CN=elena korolkova
>>>>>>>>>> CA: /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
>>>>>>>>>> has been changed from Approved to Expired due to following reason: Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>>>>> The change was made by a VOMRS CA Validation Processor
>>>>>>>>>> DN: /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
>>>>>>>>>> CA: /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>>>>>>>> Please contact VO administrator if you have any questions.
>>>>>>>>>>
>>>>>>>>>> VOMRS atlas Service
>>>>>>>>>>
>>>>>>>>> __________________________________________________
>>>>>>>>> Dr Elena Korolkova
>>>>>>>>> Email: [log in to unmask]
>>>>>>>>> Tel.: +44 (0)114 2223553
>>>>>>>>> Fax: +44 (0)114 2223555
>>>>>>>>> Department of Physics and Astronomy
>>>>>>>>> University of Sheffield
>>>>>>>>> Sheffield, S3 7RH, United Kingdom
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Facts aren't facts if they come from the wrong people. (Paul Krugman)
>>>>>>>>
>>>>>>> __________________________________________________
>>>>>>> Dr Elena Korolkova
>>>>>>> Email: [log in to unmask]
>>>>>>> Tel.: +44 (0)114 2223553
>>>>>>> Fax: +44 (0)114 2223555
>>>>>>> Department of Physics and Astronomy
>>>>>>> University of Sheffield
>>>>>>> Sheffield, S3 7RH, United Kingdom
>>>>> __________________________________________________
>>>>> Dr Elena Korolkova
>>>>> Email: [log in to unmask]
>>>>> Tel.: +44 (0)114 2223553
>>>>> Fax: +44 (0)114 2223555
>>>>> Department of Physics and Astronomy
>>>>> University of Sheffield
>>>>> Sheffield, S3 7RH, United Kingdom
>>> __________________________________________________
>>> Dr Elena Korolkova
>>> Email: [log in to unmask]
>>> Tel.: +44 (0)114 2223553
>>> Fax: +44 (0)114 2223555
>>> Department of Physics and Astronomy
>>> University of Sheffield
>>> Sheffield, S3 7RH, United Kingdom
>>
>>
>> --
>> Facts aren't facts if they come from the wrong people. (Paul Krugman)
__________________________________________________
Dr Elena Korolkova
Email: [log in to unmask]
Tel.: +44 (0)114 2223553
Fax: +44 (0)114 2223555
Department of Physics and Astronomy
University of Sheffield
Sheffield, S3 7RH, United Kingdom
|