On 30 Oct 2012, at 12:51, Steve Traylen wrote:
> On Oct 30, 2012, at 1:45 PM, Elena Korolkova wrote:
>
>> Hi Steve
>>
>> I have two questions:
>>
>> 1. should I do anything about that
>>
>
> Hopefully all should be good.
>
> Check in voms or vomrs that you still have a valid identity and that it corresponds to the identity on you have on disk.
>
> Where your identity is your (DN, CA DN) pair.
>
> Chances are if you run
>
> openssl x509 -in ~/.globus/usercert.pem -noout -issuer
I have
openssl x509 -in ~/.globus/usercert.pem -noout -issuer
issuer= /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B
I can generate proxy but I can't access https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute.
Secure Connection Failed
An error occurred during a connection to lcg-voms.cern.ch:8443.
SSL peer cannot verify your certificate.
(Error code: ssl_error_bad_cert_alert)
Thanks
Elena
>
> now and you get the 2B CA DN then everything is going to fine since you are already using that identity and the mail
> has nothing to do with that identity.
>
>> 2. if many atlas users got such emails, as Wahid said it would be better to send email to the users explanation.
>>
>
> Makes sense for the UK to do that for sure. :-)
>
>
>
>
>> Many thanks
>>
>> Elena
>>
>> On 30 Oct 2012, at 12:40, Steve Traylen wrote:
>>
>>> On Oct 30, 2012, at 1:38 PM, Elena Korolkova wrote:
>>>
>>>> I don't understand why it happens now. I was pretty sure that the problem was solved last year. There was several tickets and AFAIR the problem was discussed at WLCG.
>>>> And we are here again.
>>>>
>>>
>>> If anythign your new identity was added automatically which you may not actually have had
>>> your self at the time , the old identity was not touched.
>>>
>>> This is hopefully just your old identity expiring and not your only identity.
>>>
>>> Steve.
>>>
>>>> Elena
>>>>
>>>>
>>>> On 30 Oct 2012, at 12:34, Alessandra Forti wrote:
>>>>
>>>>> All the atlas UK users have received it - Alessandro will have a field day unswering everyone. It's the old CA expiring. You should have a certificate with "CA 2B" in the VOMRS.
>>>>>
>>>>> You can check it here
>>>>>
>>>>> https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute
>>>>>
>>>>> cheers
>>>>> alessandra
>>>>>
>>>>> On 30/10/2012 12:20, Elena Korolkova wrote:
>>>>>> Hello
>>>>>>
>>>>>> I've got email from atlas (I'll contact atlas later) that my certificate is changed to expired.
>>>>>>> Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>>
>>>>>> The certificate itself valid until 05.01.2013.
>>>>>>
>>>>>> Any idea why?
>>>>>>
>>>>>> Many thanks
>>>>>> Elena
>>>>>>
>>>>>>
>>>>>> Begin forwarded message:
>>>>>>
>>>>>>> From: <[log in to unmask]>
>>>>>>> Date: 30 October 2012 09:08:58 GMT
>>>>>>> To: <[log in to unmask]>
>>>>>>> Subject: Automatic Notification from atlas VOMRS: Your certificate status has changed
>>>>>>>
>>>>>>> Dear VO Member,
>>>>>>> The status of your certificate
>>>>>>> DN: /C=UK/O=eScience/OU=Sheffield/L=CICS/CN=elena korolkova
>>>>>>> CA: /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
>>>>>>> has been changed from Approved to Expired due to following reason: Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>>>> The change was made by a VOMRS CA Validation Processor
>>>>>>> DN: /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
>>>>>>> CA: /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>>>>> Please contact VO administrator if you have any questions.
>>>>>>>
>>>>>>> VOMRS atlas Service
>>>>>>>
>>>>>>
>>>>>> __________________________________________________
>>>>>> Dr Elena Korolkova
>>>>>> Email: [log in to unmask]
>>>>>> Tel.: +44 (0)114 2223553
>>>>>> Fax: +44 (0)114 2223555
>>>>>> Department of Physics and Astronomy
>>>>>> University of Sheffield
>>>>>> Sheffield, S3 7RH, United Kingdom
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Facts aren't facts if they come from the wrong people. (Paul Krugman)
>>>>>
>>>>
>>>> __________________________________________________
>>>> Dr Elena Korolkova
>>>> Email: [log in to unmask]
>>>> Tel.: +44 (0)114 2223553
>>>> Fax: +44 (0)114 2223555
>>>> Department of Physics and Astronomy
>>>> University of Sheffield
>>>> Sheffield, S3 7RH, United Kingdom
>>
>> __________________________________________________
>> Dr Elena Korolkova
>> Email: [log in to unmask]
>> Tel.: +44 (0)114 2223553
>> Fax: +44 (0)114 2223555
>> Department of Physics and Astronomy
>> University of Sheffield
>> Sheffield, S3 7RH, United Kingdom
__________________________________________________
Dr Elena Korolkova
Email: [log in to unmask]
Tel.: +44 (0)114 2223553
Fax: +44 (0)114 2223555
Department of Physics and Astronomy
University of Sheffield
Sheffield, S3 7RH, United Kingdom
|