Hi Elena,
I think that last year the problem was that the personal certificates
started to be signed with the new CA certificate and VOMRS didn't know
anything about it. The old CA cert however could not expire until all
the certificates signed with it had been replaced - which takes about a
year. If the last certificate signed with it has expired the old CA
certificate can now be retired. If you have the new certificate in VOMRS
and can run voms-proxy-init -voms atlas you should be ok. The email is
just one of those alerts that perhaps could have been avoided. Of course
you can ask for confirmation to Alessandro.
cheers
alessandra
On 30/10/2012 12:38, Elena Korolkova wrote:
> I don't understand why it happens now. I was pretty sure that the problem was solved last year. There was several tickets and AFAIR the problem was discussed at WLCG.
> And we are here again.
>
> Elena
>
>
> On 30 Oct 2012, at 12:34, Alessandra Forti wrote:
>
>> All the atlas UK users have received it - Alessandro will have a field day unswering everyone. It's the old CA expiring. You should have a certificate with "CA 2B" in the VOMRS.
>>
>> You can check it here
>>
>> https://lcg-voms.cern.ch:8443/vo/atlas/vomrs?path=/RootNode/MemberAction/MemberDNs&action=execute
>>
>> cheers
>> alessandra
>>
>> On 30/10/2012 12:20, Elena Korolkova wrote:
>>> Hello
>>>
>>> I've got email from atlas (I'll contact atlas later) that my certificate is changed to expired.
>>>> Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>>
>>> The certificate itself valid until 05.01.2013.
>>>
>>> Any idea why?
>>>
>>> Many thanks
>>> Elena
>>>
>>>
>>> Begin forwarded message:
>>>
>>>> From: <[log in to unmask]>
>>>> Date: 30 October 2012 09:08:58 GMT
>>>> To: <[log in to unmask]>
>>>> Subject: Automatic Notification from atlas VOMRS: Your certificate status has changed
>>>>
>>>> Dear VO Member,
>>>> The status of your certificate
>>>> DN: /C=UK/O=eScience/OU=Sheffield/L=CICS/CN=elena korolkova
>>>> CA: /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
>>>> has been changed from Approved to Expired due to following reason: Certificate signed by /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA is not longer valid.
>>>> The change was made by a VOMRS CA Validation Processor
>>>> DN: /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
>>>> CA: /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>> Please contact VO administrator if you have any questions.
>>>>
>>>> VOMRS atlas Service
>>>>
>>> __________________________________________________
>>> Dr Elena Korolkova
>>> Email: [log in to unmask]
>>> Tel.: +44 (0)114 2223553
>>> Fax: +44 (0)114 2223555
>>> Department of Physics and Astronomy
>>> University of Sheffield
>>> Sheffield, S3 7RH, United Kingdom
>>>
>>>
>>>
>>>
>>
>> --
>> Facts aren't facts if they come from the wrong people. (Paul Krugman)
>>
> __________________________________________________
> Dr Elena Korolkova
> Email: [log in to unmask]
> Tel.: +44 (0)114 2223553
> Fax: +44 (0)114 2223555
> Department of Physics and Astronomy
> University of Sheffield
> Sheffield, S3 7RH, United Kingdom
>
>
>
>
--
Facts aren't facts if they come from the wrong people. (Paul Krugman)
|