Thanks Mararten,
I copied the cert+key files into /etc/grid-scurity/dpmmgr, and the
problem was resolved.
Susana.
Maarten Litmaath wrote:
> Hola Susana,
>
>> A few days ago, I updated the host certificate of e-se.iaa.es (and
>> e-ce.iaa.es).
>> I runned the following openssl command in order to check it, and it
>> was OK:
>> [root@e-se grid-security]# openssl x509 -noout -text -in
>> /etc/grid-security/hostcert.pem
>> Certificate:
>> Data:
>> Version: 3 (0x2)
>> Serial Number: 3191 (0xc77)
>> Signature Algorithm: sha1WithRSAEncryption
>> Issuer: DC=es, DC=irisgrid, CN=IRISGridCA
>> Validity
>> Not Before: Sep 29 13:42:23 2009 GMT
>> Not After : Sep 29 13:42:23 2010 GMT
>> Subject: DC=es, DC=irisgrid, O=iaa, CN=e-se.iaa.es
>> ........................
>>
>> I copied the new hostcert.pem and the new hostkey.pem files in
>> /opt/glite/var/rgma/.certs/, and then I restarted the machine.
>>
>> But I get an error in SRMv2-host-cert-valid SAM test on e-se.iaa.es:
>> https://lcg-sam.cern.ch:8443/sam/sam.py?funct=ShowHistory&sensors=SRMv2&vo=ops&nodename=e-se.iaa.es
>>
>>
>> Please, could you tell me how can I fix it?
>
> You also need to copy the cert+key into /etc/grid-security/dpmmgr
> with the correct ownership. YAIM would have done that for you.
>
--
Susana Sánchez Expósito
Proyecto e-Ciencia Andaluza (e-CA)
www.e-ca.iaa.es
Instituto de Astrofísica de Andalucía IAA (CSIC)
Camino Bajo de Huétor, 50. Granada E-18008
Tel:(+34) 958 121 311 / (+34) 958 230 631
Fax:(+34) 958 814 530
e-mail: [log in to unmask]
|