Hi
I just installed Globus Toolkit 4.2.1 on my system
and was trying to follow the Quickstart and Detailed guide to get upto the
point where i installed
simpleCA
Created and signed 1 trial certificate.
but i have a problem using it.
I copied into my home directory as
$home/.globus/*cert.pem and *key.pem
i can do a grid-proxy-init -debug
it says
[skha...@protos .globus]$ grid-proxy-init -debug
User Cert File: /home/skhanal/.globus/usercert.pem
User Key File: /home/skhanal/.globus/userkey.pem
Trusted CA Cert Dir: (null)
Output File: /tmp/x509up_u501
Your identity:
/O=Grid/OU=GlobusTest/OU=simpleCA-protos.cs.bgsu.edu/OU=cs.bgsu.edu/CN=Samir
Khanal
Enter GRID pass phrase for this identity:
Creating proxy .......++++++++++++
.............++++++++++++
Done
Your proxy is valid until: Sat Feb 7 05:49:53 2009
--------------------------------------
/////////////////////////////////////////////
----------------------------------------
But when i do the grid-proxy-init -debug -verify i run into credential
verification errors.
[skha...@protos .globus]$ grid-proxy-init -debug -verify
User Cert File: /home/skhanal/.globus/usercert.pem
User Key File: /home/skhanal/.globus/userkey.pem
Trusted CA Cert Dir: /home/skhanal/.globus/certificates
Output File: /tmp/x509up_u501
Your identity:
/O=Grid/OU=GlobusTest/OU=simpleCA-protos.cs.bgsu.edu/OU=cs.bgsu.edu/CN=Samir
Khanal
Enter GRID pass phrase for this identity:
Creating proxy .++++++++++++
..++++++++++++
Done
Error: Couldn't verify the authenticity of the user's credential to generate a
proxy from.
grid_proxy_init.c:971: globus_credential: Error verifying credential:
Failed to verify credential
globus_gsi_callback_module: Could not verify credential
globus_gsi_callback_module: Can't get the local trusted CA certificate: Cannot
find trusted CA certificate with hash ef2a2c8a in
/home/skhanal/.globus/certificates
--------------------------------------
/////////////////////////////////////////////
----------------------------------------
After i did
$GLOBUS_LOCATION/setup/globus_simple_ca_CA_Hash_setup/setup-gsi -default
i could see the directory /etc/grid-security/certificates
but the directory as mentioned in the above error message - Trusted CA Cert
Dir: /home/skhanal/.globus/certificates ---- was not there and i created it
myself and then copied the usercert and userkey files there.
Am i doing it correctly.?
The manual said something about permissions.
My cert permissions are as follows.
drwxrwxr-x 2 skhanal skhanal 4096 Feb 6 17:12 certificates
-rw-r--r-- 1 skhanal skhanal 2733 Feb 6 17:32 usercert.pem
-rw-r--r-- 1 skhanal skhanal 1403 Feb 6 17:30 usercert_request.pem
-r-------- 1 skhanal skhanal 963 Feb 6 17:30 userkey.pem
I know this might be a trivial problem and i am missing some minor strings.
Any help will be greatly appreciated!
thanks
Samir
-----------------------------------
Samir Khanal
CS Grad Student
Hayes 226
Bowling Green State University
Bowling Green, OH 43402
[email protected]
