 |
 |
On 01/10/2011 09:12, Stephen Burke wrote: > Testbed Support for GridPP member institutes [mailto:TB- >> [log in to unmask]] On Behalf Of Jens Jensen said: >> Incidentally, if the higher number of CAs impacts you, you can either >> remove some CAs (EGI stopped short of recommending which ones, leaving >> it to sites to decide), > > Do sites have any easy basis for decision, other than grepping their logs to see what DNs turn up? In the days of gridmap files, the decision was easy enough. >> Incidentally, the plan was for 2B to go live from Monday - it has >> already issued certificates for certain test servers in the >> infrastructure - but we can delay this by a few days if necessary. > > 2B or not 2B, that is the question? Aye, there's the rub. They have slightly anonymous names because they are likely to change their roles within the lifetime. It would be a bad idea to name the CA "offline" because then we couldn't bring it online later. -j