On 01/10/2011 09:12, Stephen Burke wrote:
> Testbed Support for GridPP member institutes [mailto:TB-
>> [log in to unmask]] On Behalf Of Jens Jensen said:
>> Incidentally, if the higher number of CAs impacts you, you can either
>> remove some CAs (EGI stopped short of recommending which ones, leaving
>> it to sites to decide),
>
> Do sites have any easy basis for decision, other than grepping their logs to see what DNs turn up?
In the days of gridmap files, the decision was easy enough.
>> Incidentally, the plan was for 2B to go live from Monday - it has
>> already issued certificates for certain test servers in the
>> infrastructure - but we can delay this by a few days if necessary.
>
> 2B or not 2B, that is the question?
Aye, there's the rub.
They have slightly anonymous names because they are likely to change
their roles within the lifetime. It would be a bad idea to name the CA
"offline" because then we couldn't bring it online later.
-j
|