I am so sorry for an extra mail in your inboxes... i just solved the problem
-Copied the signing policy from /etc/grid-security/certificates/hash.0 and hash-policy file to my $HOME/.globus/certificates and now it get a verified ok message. Samir ________________________________________ From: Samir Khanal Sent: Friday, February 06, 2009 6:02 PM To: [email protected] Subject: grid-proxy-init -debug -verify error Hi I just installed Globus Toolkit 4.2.1 on my system and was trying to follow the Quickstart and Detailed guide to get upto the point where i installed simpleCA Created and signed 1 trial certificate. but i have a problem using it. I copied into my home directory as $home/.globus/*cert.pem and *key.pem i can do a grid-proxy-init -debug it says [skha...@protos .globus]$ grid-proxy-init -debug User Cert File: /home/skhanal/.globus/usercert.pem User Key File: /home/skhanal/.globus/userkey.pem Trusted CA Cert Dir: (null) Output File: /tmp/x509up_u501 Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-protos.cs.bgsu.edu/OU=cs.bgsu.edu/CN=Samir Khanal Enter GRID pass phrase for this identity: Creating proxy .......++++++++++++ .............++++++++++++ Done Your proxy is valid until: Sat Feb 7 05:49:53 2009 -------------------------------------- ///////////////////////////////////////////// ---------------------------------------- But when i do the grid-proxy-init -debug -verify i run into credential verification errors. [skha...@protos .globus]$ grid-proxy-init -debug -verify User Cert File: /home/skhanal/.globus/usercert.pem User Key File: /home/skhanal/.globus/userkey.pem Trusted CA Cert Dir: /home/skhanal/.globus/certificates Output File: /tmp/x509up_u501 Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-protos.cs.bgsu.edu/OU=cs.bgsu.edu/CN=Samir Khanal Enter GRID pass phrase for this identity: Creating proxy .++++++++++++ ..++++++++++++ Done Error: Couldn't verify the authenticity of the user's credential to generate a proxy from. grid_proxy_init.c:971: globus_credential: Error verifying credential: Failed to verify credential globus_gsi_callback_module: Could not verify credential globus_gsi_callback_module: Can't get the local trusted CA certificate: Cannot find trusted CA certificate with hash ef2a2c8a in /home/skhanal/.globus/certificates -------------------------------------- ///////////////////////////////////////////// ---------------------------------------- After i did $GLOBUS_LOCATION/setup/globus_simple_ca_CA_Hash_setup/setup-gsi -default i could see the directory /etc/grid-security/certificates but the directory as mentioned in the above error message - Trusted CA Cert Dir: /home/skhanal/.globus/certificates ---- was not there and i created it myself and then copied the usercert and userkey files there. Am i doing it correctly.? The manual said something about permissions. My cert permissions are as follows. drwxrwxr-x 2 skhanal skhanal 4096 Feb 6 17:12 certificates -rw-r--r-- 1 skhanal skhanal 2733 Feb 6 17:32 usercert.pem -rw-r--r-- 1 skhanal skhanal 1403 Feb 6 17:30 usercert_request.pem -r-------- 1 skhanal skhanal 963 Feb 6 17:30 userkey.pem I know this might be a trivial problem and i am missing some minor strings. Any help will be greatly appreciated! thanks Samir ----------------------------------- Samir Khanal CS Grad Student Hayes 226 Bowling Green State University Bowling Green, OH 43402 [email protected]
