according to the link you gave the copies of the certificates (2 in the CE case) are set by the Yaim (automatic config) indeed I have them in the /etc/gid-security as tomcat-cert.pem and tomcat-key.pem (owner: tomcat) and in /var/glite/.certs/ (owner : glite)
and they are of same content (diff) as the original ones at /etc/grid-security/hostcert.pem and hostkey.pem
As for the 'copying to WN and CE' : since I am using temporal certificates and they do not come from Terena ( they are from Arc for 30 days)
then they will not be known to the WNs by fetch_crl . Instead ARC supplies rpm that are installed on the WNs and UI to the
/etc/grid-security/certificates directory
any other idea for the issue I describe ?
|