> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:TB-
>
> So, as users, what should we do now?
>
I'd have thought the best thing would be to get CERN to re-run the
automatic change process they used before to find anyone with only
the old CA DN and bulk add them all with the new one. That would fix
it once for everybody, and now we can (I think) be sure that no-one
still has a valid certificate signed by the old CA so no-one will be
able to create a new registration with an old certificate.
Is there reason we can't do that?
Ewan
|