 |
 |
Hi Mingchao You are right but it seems that someone changed the release file before sending broadcast http://repository.egi.eu/sw/production/cas/1/current/meta/ca-policy-egi-core .release Cheers Kashif -----Original Message----- From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of Mingchao Ma Sent: 04 July 2011 17:17 To: [log in to unmask] Subject: Re: CA version - any connection to what actually is installed on my nodes ? Hi Daniela, > I just got a nagios warning: > https://gridppnagios.physics.ox.ac.uk/nagios/cgi- > bin/extinfo.cgi?type=2&host=ceprod06.grid.hep.ph.ic.ac.uk&service=org.sam. > WN-CAver-/ops/Role=lcgadmin You might notice the lines of following on the page "Allowed delay for update : 8 day(s), 0 hour(s), 0 min Delay of warning : 3 day(s), 0 hour(s), 0 min Test Results : Remaining time for sites to upgrade is : 7 day(s), 8 hour(s), 13 min" This is part of CA upgrade process. The latest CA package is CA 1.40. Site has up to 8 days to upgrade to the latest version. After the 8 days gray period, Nagios will flag it as a critical issue. I do not know if sites have received a CA upgrade broadcast (I have not seen the broadcast yet), if not, then it will be broadcasted very soon. > Now if I go on the offending node, in the directory it claims to be > looking at: > > deathstar:dbauer :-> ssh root@we000 > Last login: Fri Jul 1 15:06:52 2011 from deathstar.hep.ph.ic.ac.uk > [root@we000 ~]# cd /vols/grid/certificates > > [root@we000 certificates]# grep version * > AAACertificateServices.info:version = 1.38 > AddTrust-External-CA-Root.info:version = 1.38 > AEGIS.info:version = 1.38 > AIST.info:version = 1.38 > APAC.info:version = 1.38 > [etc] > > Where does it get the 1.40 from ?! The CA update process can be found https://wiki.egi.eu/wiki/EGI_IGTF_Release_Process In summary, it is ok to see the warning for now. Once the CA package is updated, the warning should go away. Cheers, Mingchao > Cheers, > Daniela > > -- > ----------------------------------------------------------- > [log in to unmask] > HEP Group/Physics Dep > Imperial College > Tel: +44-(0)20-75947810 > http://www.hep.ph.ic.ac.uk/~dbauer/