On Aug 12, 2008, at 8:06 AM, I8abyte wrote:
My root CA has a pathlen of "3" and my second-level CA has a pathlen "2". My personal cert does not have a pathlen set and never has any of my proxy certs displayed one. BTW, thanks for your help so far!
I've tried creating a CA with pathlen constraint and generated proxies beyond that level without problems (with a few different openssl versions). Note that the callback code is a bit openssl version- dependent and must be compiled and run against the same openssl version.
I'd be interested in seeing the output from setting the environment variable GLOBUS_GSI_CALLBACK_DEBUG_LEVEL to 3 in the app which is failing.
Joe
