Hi all,
I have reinstalled simpleCA by running the installation script and
setup gsi-setup again with new subject name.I have configured and
signed host certs and usercerts with new names.
but further I have to configure proxy cert but it will give the
following errors and various output regarding certificates are shown :
(1)
glo...@simar-laptop:~$ $GLOBUS_LOCATION/bin/grid-proxy-init -verify -debug
User Cert File: /home/globus/.globus/usercert.pem
User Key File: /home/globus/.globus/userkey.pem
Trusted CA Cert Dir: /etc/grid-security/certificates
Output File: /tmp/x509up_u1001
Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-simar-laptop/CN=root
Enter GRID pass phrase for this identity:
Creating proxy .....++++++++++++
.......++++++++++++
Done
Error: Couldn't verify the authenticity of the user's credential to
generate a proxy from.
grid_proxy_init.c:971: globus_credential: Error verifying
credential: Failed to verify credential
globus_gsi_callback_module: Could not verify credential
globus_gsi_callback_module: Can't get the local trusted CA
certificate: Cannot find trusted CA certificate with hash b2bc8b3f in
/etc/grid-security/certificates
(2)
glo...@simar-laptop:~$ $GLOBUS_LOCATION/bin/grid-default-ca -list
The available CA configurations installed on this host are:
Directory: /etc/grid-security/certificates
1) 7a13c923 - /O=Grid/OU=GlobusTest/OU=simpleCA-cse.mtech.com/CN=Globus
Simple CA
Directory: /home/globus/globus-4.2.1/share/certificates
2) b2bc8b3f - /O=Grid/OU=GlobusTest/OU=simpleCA-simar-laptop/CN=Globus
Simple CA
The default CA is:
/O=Grid/OU=GlobusTest/OU=simpleCA-cse.mtech.com/CN=Globus Simple CA
Location: /etc/grid-security/certificates/7a13c923.0
(3)
glo...@simar-laptop:~$ ls $HOME/.globus -l
total 16
drwxr-xr-x 4 globus users 4096 2009-09-13 11:58 persisted
drwx------ 6 globus globus 4096 2009-09-15 22:17 simpleCA
-rw-r--r-- 1 globus globus 2641 2009-09-14 22:43 usercert.pem
-rw------- 1 globus globus 963 2009-09-14 23:07 userkey.pem
What should I do to set my new cert name for proxy as it is taking the old one.
please help
Regards
Simar Virk
