This is the behaviour I'd expect. As far as the CertWizard is concerned then as they are signed by a "different" CA (the UK Root) they are "Unknown".
BTW Note that although CW seems to be working fine for me (as in I can run it and get further than WInnie with no red writing saying "offiline" - I.e. can't connect to CA server),
it is taking a long long time to run when accessed via the webstart link on
http://www.ngs.ac.uk/ukca/certificates/certwizard.html
Cheers
JK
> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of John Hill
> Sent: Tuesday, May 02, 2017 2:58 PM
> To: [log in to unmask]
> Subject: Re: Can't use certwizard, "cannot connect to CA server"
>
> As a followup to this: although I can perform the same operation as
> Winnie tried, both the "UK e-Science Root" and "UK e-Science CA 2B"
> certs in my keystore have the Status "Unknown (offline or certificate
> not recognized by UK CA". Sorry, but I can't remember whether this is
> the normal status or not.
>
> John
>
> On 02/05/2017 14:10, John Kewley wrote:
> > OK thanks
> >
> > Winnie - can you call me on Skype and I'll see if we can sort this as it could
> well be an issue at your end somehow.
> >
> > Cheers
> >
> > JK
> >
> >> -----Original Message-----
> >> From: Testbed Support for GridPP member institutes [mailto:TB-
> >> [log in to unmask]] On Behalf Of John Hill
> >> Sent: Tuesday, May 02, 2017 2:09 PM
> >> To: [log in to unmask]
> >> Subject: Re: Can't use certwizard, "cannot connect to CA server"
> >>
> >> Hi John,
> >> I can connect OK from Cambridge.
> >>
> >> Cheers,
> >> John
> >>
> >> On 02/05/2017 14:05, John Kewley wrote:
> >>> Hi
> >>>
> >>> Can someone who usually uses CertWizard please try for me and see if it
> >> connects OK to the CA Server or if it gives Winnie's error when connecting
> >> from a machine that is not inside STFC's firewall - and post their result
> here.
> >>>
> >>> If you see other posts saying they could/couldn't connect then that is
> >> sufficient.
> >>>
> >>> Cheers
> >>>
> >>> JK
> >>>
> >>>> -----Original Message-----
> >>>> From: Testbed Support for GridPP member institutes [mailto:TB-
> >>>> [log in to unmask]] On Behalf Of Winnie Lacesso
> >>>> Sent: Monday, May 01, 2017 10:44 AM
> >>>> To: [log in to unmask]
> >>>> Subject: Can't use certwizard, "cannot connect to CA server"
> >>>>
> >>>> Heard no reply yet, sending this to tb-support in case someone else has
> >>>> had this experience & knows the solution. Hopefully!!!!
> >>>>
> >>>> Both Friday & Monday same error - can't connect to CA server, so it
> wasn't
> >>>> a one-off Friday problem.
> >>>> HELP, server cert expires v soon now! Need to renew!
> >>>>
> >>>> ---------- Forwarded message ----------
> >>>> Date: Fri, 28 Apr 2017 10:14:27 +0100 (BST)
> >>>> From: Winnie Lacesso <[log in to unmask]>
> >>>> To: UK Grid Operations Support Centre <[log in to unmask]>
> >>>> Subject: Can't use certwizard, "cannot connect to CA server"
> >>>>
> >>>> Happy Friday!
> >>>>
> >>>> As I've done many times before, I fire up CertWizard & import a server
> >>>> cert that needs renewal. This time, though, red text appears saying
> >>>>
> >>>> "You are working offline
> >>>> You will not be able to apply-for, renew or etc until a connection has
> >>>> been established. Hit the refresh button to try and reconnect."
> >>>>
> >>>> Nothing works. Are the UK CA servers down? I've tried from more than
> >> one
> >>>> computer here with same fail messages, so that seems evidence the
> >> problem
> >>>> is not one particular computer here.
> >>>>
> >>>> Our server cert expires in 7 days so please can this be fixed ASAP?
|