Hi John,
I'm picking up an action that I got at the ops meeting today that
relates to the GGUS tocket I raised on "EMI3 ARGUS DN with EMAILADDRESS",
i.e. https://ggus.eu/tech/ticket_show.php?ticket=92585
Forgive me if we've been over this, or if it's covered
elsewhere. The requirements I have are these.
:--- reqs ---
For all the machines in my cluster, I want to acquire host
certificates that have no email-address component in the
DN field.
I want a period of overlap, during which both versions of each
certificate are valid. This is to allow the current certificate to
cover the interim period between acquiring and later installing
host certificates without email-address components.
I then want to install these onto all my machines without taking
any of them out of action, perhaps retiring the old
certificates once it's done.
:------------
I'd be very grateful if you could comment on the best approach to do this.
As a goal, a suitable procedure might include the use of Browser,
Cert Wizard (or Email?) processes. As we have a diverse community, it is quite
likely that several methods are current - is any method recommended over
another?
Many thanks in advance,
Steve
-----Original Message-----
From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of
Stephen Burke
Sent: 18 March 2013 17:15
https://ggus.eu/tech/ticket_show.php?ticket=92585
Can we finally get rid of email addresses in DNs?
This is a good plan.
Current situation is if you renew your certificate then your emailAddress part of your DN will be in your renewed one. Please only do this if you really need it in there as the next version of the Grid Certificate Profile will
say that such a field "MUST NOT" (as opposed to the current "SHOULD NOT") be there.
If you do need it then please let Jens and I know, and also why / what m/w relies on it.
Otherwise you can apply for a new one with the same CN and you'll find it doesn't have an emailAddress in it.
Cheers
JK
--
Steve Jones [log in to unmask]
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/
|