Print

---

Del Cano Novales, C (Cristina) wrote:
> Hi Adrian,
Hi,

> I'm guessing you renewed this certificate recently... Did you copy the
Good guess :D :)

> new certificate both to /etc/grid-security/ AND to /etc/tomcat5?
well... no .. i wasn't aware that it is need it .. i imagined that this
is done by yaim ... and as it looks, it was done so :

[root@grid01 tomcat5]# openssl verify /etc/tomcat5/hostcert.pem
/etc/tomcat5/hostcert.pem: OK

Is there any other place that i should check?

Thanks you,
Adrian

> Cheers,
> 
> Cristina
> 
> -----Original Message-----
> From: LHC Computer Grid - Rollout [mailto:[log in to unmask]] On
> Behalf Of Adrian Sevcenco
> Sent: 22 April 2009 11:01
> To: [log in to unmask]
> Subject: [LCG-ROLLOUT] apel-publisher :: certificate expired
> 
> Hi,
> I have a problem with apel-publisher : it reports that i have an expired
> certificate (which i do not). The log is below...
> I tried to reconfigure all services and i checked the certificate ...
> [root@grid01 grid-security]# openssl verify hostcert.pem
> hostcert.pem: OK
> everything seems ok ... i don't know what to try next ..
> 
> the only thing that caught my eye is :
> at
> org.bouncycastle.jce.provider.X509CertificateObject.checkValidity(Unknow
> n
> Source)
> 
> Have somebody any idea about what is going on?
> 
> Thanks,
> Adrian
> 
> The log :
> 
> 2009-04-22 12:55:49,587 [main] FATAL
> org.glite.security.trustmanager.ContextWrapper - The credentials reading
> failed:  certificate expired on 20090321120443GMT+00:00
> 2009-04-22 12:55:49,587 [main] FATAL
> org.glite.security.trustmanager.ContextWrapper - ContextWrapper
> initialization failed: certificate expired on 20090321120443GMT+00:00
> Wed Apr 22 09:55:49 UTC 2009: apel-publisher - program aborted
> org.glite.apel.core.ApelException: org.glite.apel.core.ApelException:
> org.glite.rgma.RGMASecurityException: Client certificate error:
> certificate expired on 20090321120443GMT+00:00
>         at
> org.glite.apel.publisher.AccountPublisher.<init>(AccountPublisher.java:1
> 77)
>         at
> org.glite.apel.publisher.AccountManager.run(AccountManager.java:130)
>         at
> org.glite.apel.publisher.ApelPublisher.runJoinProcessor(ApelPublisher.ja
> va:121)
>         at
> org.glite.apel.publisher.ApelPublisher.run(ApelPublisher.java:69)
>         at
> org.glite.apel.publisher.ApelPublisher.main(ApelPublisher.java:238)
> Caused by: org.glite.apel.core.ApelException:
> org.glite.rgma.RGMASecurityException: Client certificate error:
> certificate expired on 20090321120443GMT+00:00
>         at
> org.glite.apel.publisher.AccountPublisher.createResilientPrimaryProducer
> (AccountPublisher.java:192)
>         at
> org.glite.apel.publisher.AccountPublisher.<init>(AccountPublisher.java:1
> 74)
>         ... 4 more
> Caused by: org.glite.rgma.RGMASecurityException: Client certificate
> error: certificate expired on 20090321120443GMT+00:00
>         at
> org.edg.info.ServletConnection.setupHTTPS(ServletConnection.java:200)
>         at
> org.edg.info.ServletConnection.setupSecurity(ServletConnection.java:180)
>         at
> org.edg.info.ServletConnection.connect(ServletConnection.java:498)
>         at
> org.edg.info.ServletConnection.connect(ServletConnection.java:401)
>         at
> org.edg.info.ServletConnection.sendCommand(ServletConnection.java:443)
>         at
> org.glite.rgma.stubs.ProducerFactoryStub.createInstance(ProducerFactoryS
> tub.java:165)
>         at
> org.glite.rgma.stubs.ProducerFactoryStub.createPrimaryProducer(ProducerF
> actoryStub.java:76)
>         at
> org.glite.rgma.stubs.ProducerFactoryStub.createPrimaryProducer(ProducerF
> actoryStub.java:219)
>         at
> org.glite.apel.publisher.AccountPublisher.createResilientPrimaryProducer
> (AccountPublisher.java:189)
>         ... 5 more
> Caused by: java.security.cert.CertificateExpiredException: certificate
> expired on 20090321120443GMT+00:00
>         at
> org.bouncycastle.jce.provider.X509CertificateObject.checkValidity(Unknow
> n
> Source)
>         at
> org.bouncycastle.jce.provider.X509CertificateObject.checkValidity(Unknow
> n
> Source)
>         at
> org.glite.security.trustmanager.ContextWrapper.initKeyManagers(ContextWr
> apper.java:465)
>         at
> org.glite.security.trustmanager.ContextWrapper.init(ContextWrapper.java:
> 394)
>         at
> org.glite.security.trustmanager.ContextWrapper.<init>(ContextWrapper.jav
> a:246)
>         at
> org.glite.security.trustmanager.TimedOutContextWrapper.<init>(TimedOutCo
> ntextWrapper.java:41)
>         at
> org.edg.info.ServletConnection.setupHTTPS(ServletConnection.java:189)
>         ... 13 more