Hi, Here are a error (or not finished script) and a bad feature (IMHO): The error: ----------
setup-simple-ca -subject "cn=Terapix CA, o=IAP, ou=Terapix" is fine
setup-simple-ca -subject "o=IAP, ou=Terapix, cn=Terapix CA" is wrong
Country Name (2 letter code) [Terapix CA]:string is too long, it needs
to be less than 2 bytes long
Country Name (2 letter code) [Terapix CA]:string is too long, it needs
to be less than 2 bytes long
Country Name (2 letter code) [Terapix CA]:string is too long, it needs
to be less than 2 bytes long
Country Name (2 letter code) [Terapix CA]:string is too long, it needs
to be less than 2 bytes long
Country Name (2 letter code) [Terapix CA]:problems making Certificate
Request
Error number 1 was returned by
/opt/globus/bin/openssl
More funny:
setup-simple-ca -subject "o=IAP, ou=Terapix, cn=Terapix CA, c=FR, l=Paris"
leads to
A self-signed certificate has been generated
for the Certificate Authority with the subject:
/C=FR/O=IAP/OU=Terapix/CN=o=IAP/ou=Terapix/Terapix CA
The bad feature:
----------------
If you run simple-ca not as the globus user, then you are in trouble
since this command wants to write in $GLOBUS_LOCATION. Why ?
Why do I need to write there to make a CA ?
I use Linux + Globus GT 4.0.5.
Olivier.
ps: I made some scripts to make a CA and users and hosts keys. It works
fine with GT 2 but does not work the GT 4. I use only openssl.
If someone wants to have a look, please, you can fetch it at
http://www.ricou.eu.org/scripts/GlobusCA.tgz (some french in it but
it should be understandable. If not, contact me).
signature.asc
Description: Digital signature
