The CA has not been revoked!
I called Remi earlier this morning (having previously sent email to him
and Alessandro). He said he'd fix it today. Apparently someone at CERN
had taken the decision to take it out without consulting me.
At some point we may have to move people off the old CA to satisfy
certain relying parties but then I'd tell you beforehand!
The CA will be removed from the distribution when, and only when, it can
be safely removed.
-j
Burke, S (Stephen) wrote:
> Testbed Support for GridPP member institutes
>> [mailto:[log in to unmask]] On Behalf Of Ewan MacMahon said:
>> Presumably he has a properly signed revocation certificate to back
>> that up?
>
> This sounds like a misunderstanding - if the old CA has been
> revoked/removed it's a catastrophic mistake. It may be that someone did
> a global edit from one DN to the other in the DB without realising what
> they were doing ...
>
>>> If I go to the ATLAS VOMS page then I am invited to complete
>>> the first part of user registration again.
>
> Can you actually do it, or does it reject the cert as signed by an
> invalid CA?
>
> Stephen
|