Hi,

I am doing some testing on lucky cluster and I ran into a problem while using simple CA. When I generated a host certificate for lucky0:

grid-cert-request -host lucky0.mcs.anl.gov

the Subject line in the generated cert looks something like this:

Subject: O=Grid, OU=GlobusTest, OU=simpleCA-lucky0.mcs.anl.gov, OU=mcs.anl.gov, CN=host/lucky0.mcs.anl.gov

It adds "host" before the hostname for the CN, and I had authentication problems because of this. Is this default behavior intentional or do you guys think it should only have hostname without "host/" ? I could change this behavior by explicitly adding the CN flag while generating the host cert:

grid-cert-request -host lucky0.mcs.anl.gov -cn lucky0.mcs.anl.gov

This generated the host cert with subject:

Subject: O=Grid, OU=GlobusTest, OU=simpleCA-lucky0.mcs.anl.gov, OU=mcs.anl.gov, CN=lucky0.mcs.anl.gov

I thought this should have been the default behavior? Or is it normal?

Thanks,
-Dina

------------------------
Dinanath Sulakhe
Mathematics and Computer Science Division,
Argonne National Laboratory
630-252-7856


Reply via email to