Hello
you were right, I did modify the certificate i do not have the lib64
error anymore but this one stays.
INFO: Now creating the grid-mapfile - this may take a few minutes...
voms
search(https://voms.cern.ch:8443/voms/atlas/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fatlas%2FRole%3Dproduction):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
voms
search(https://voms.cern.ch:8443/voms/atlas/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fatlas):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
voms
search(https://voms.cern.ch:8443/voms/ops/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fops%2FNGI%2FRomania):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
Exit with error(s) (code=3)
INFO: Now creating the lcgdm-mapfile - this may take a few minutes...
voms
search(https://voms.cern.ch:8443/voms/atlas/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fatlas%2FRole%3Dproduction):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
voms
search(https://voms.cern.ch:8443/voms/atlas/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fatlas):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
voms
search(https://voms.cern.ch:8443/voms/ops/services/VOMSCompatibility?method=getGridmapUsers&container=%2Fops%2FNGI%2FRomania):
SSL negotiation failed: error:1406D0CB:SSL
routines:GET_SERVER_HELLO:peer error no cipher
On 3/6/2013 4:02 PM, David Smith wrote:
> On Mar 6, 2013, at 1:47 PM, Felix Farcas wrote:
>
>> Hello
>>
>> I have a Storage element in Romania on site RO-14-ITIM.
>>
>> I tried today to recompile when changing the certificates.
>>
>> I had a lot of error.
> Hi Felix,
>
> It looks like your host certificate has a problem, e.g. if I try connecting with gridftp
>
> Error in OLD GAA code: The subject of the certificate "/DC=RO/DC=RomaniaGRID/O=ITIM/CN=cn-se1.itim-cj.ro" does not match the signing policies defined in /etc/grid-security/certificates/1f3834d0.signing_policy
>
> and signing policy I have for the CA says:
>
> cond_subjects globus '"/DC=RO/DC=RomanianGRID/*"'
>
> Note the certificate says "DC=RomaniaGRID" and the policy says "DC=RomanianGRID". Double check with your CA.
>
> The voms search errors in the yaim log are probably harmless, but shows you've got (some) old definitions for the dteam voms servers. You could check you have only the hellasgrid server defined:
>
> VO_DTEAM_VOMS_SERVERS='vomss://voms.hellasgrid.gr:8443/voms/dteam?/dteam/'
> VO_DTEAM_VOMSES="\
> 'dteam voms.hellasgrid.gr 15004 \
> /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr dteam 24' \
> 'dteam voms2.hellasgrid.gr 15004 \
> /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr dteam 24' \
> "
> VO_DTEAM_VOMS_CA_DN="\
> '/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006' \
> '/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006' \
> "
>
> in your site-info.def or (without the VO_DTEAM_ prefix) in your vo.d/dteam file.
>
> The backtraces from dpns-mkdir are due to a bug which is being triggered by the certificate problems.
>
> Yours,
> David
>
> --
> -------------------------------------------------------------------------
> David Smith e-mail: [log in to unmask] tel: +41 22 76 70394
> Address: D. Smith, CERN G07310, Bat 28 R-004, 1211 Geneva 23, Switzerland
> -------------------------------------------------------------------------
>
--
Dr. Ing. Farcas Felix
National Institute of Research and Development
of Isotopic and Molecular Technology,
IT - Department - Cluj-Napoca, Romania
yahoo id: felixfarcas
skype id: felix.farcas
mobile: +40-742-195323
|