Dear All,
I have a problem using the globus toolkit with my self signed certificate.
My system details are:
Ubuntu 8.10 intrepid
Globus toolkit (installed by the ogsa-dai component) Java WS Core 4.0.5
Java version 1.6.0
1. I created my CA certificate with:
openssl genrsa -out server.key 1024
openssl req -new -key server.key -x509 -out ca.crt -days 1095
2. I obtained the hash value with:
openssl x509 -hash -in ca.crt -noout
3. and I moved the certificate to
/etc/grid-security/certificates/MYHASHVALUE.0
4. I created the /etc/grid-security/certificates/MYHASHVALUE.signing_policy
4.b - I copied the MYHASHVALUE.0 and MYHASHVALUE.signing_policy into
~/.globus/certificates/ folder
5. I create my self signed certificate with:
openssl req -newkey rsa:512 -nodes -out userreq.pem -keyout userkey.pem
6. I signed the certificate with my CA certificate
openssl x509 -CA ca.pem -CAkey ca.key -CAcreateserial -req -in
userreq.pem -out usercert.pem -days 365
7. I moved usercert.pem in ~/.globus/
8. cd into the $GLOBUS_LOCATION and I executed grid-proxy-init
The output is:
2009-03-27 17:54:14,768 ERROR gsi.TrustedCertificates
[main,loadCert:220] Certificate
/home/dguidotti/.globus/certificates/c81e1c27.0 failed to load.
java.security.GeneralSecurityException: Certificate data not found.
at org.globus.gsi.CertUtil.loadCertificate(CertUtil.java:137)
at
org.globus.gsi.TrustedCertificates.loadCert(TrustedCertificates.java:200)
at
org.globus.gsi.TrustedCertificates.reload(TrustedCertificates.java:151)
at
org.globus.gsi.TrustedCertificates$DefaultTrustedCertificates.refresh(TrustedCertificates.java:275)
at
org.globus.gsi.TrustedCertificates.getDefault(TrustedCertificates.java:259)
at
org.globus.gsi.TrustedCertificates.getDefaultTrustedCertificates(TrustedCertificates.java:238)
at org.globus.tools.ProxyInit.verify(ProxyInit.java:119)
at org.globus.tools.DefaultProxyInit.verify(ProxyInit.java:582)
at org.globus.tools.ProxyInit.createProxy(ProxyInit.java:217)
at org.globus.tools.ProxyInit.main(ProxyInit.java:517)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:95)
at org.globus.bootstrap.Bootstrap.main(Bootstrap.java:37)
Proxy verify failed: Unknown CA
Does someone know if there are any problem using a self signed
certificate or the problem concerns some configuration error?
Many thanks in advance
Regards,
Davide Guidotti
