I agree it looks like a certificate problem.

I like to use the openssl s_client and s_server commands to check my
certificate setup. For example:

# openssl s_server -accept 9999 -cert /etc/grid-security/hostcert.pem
-key /etc/grid-security/hostkey.pem -CApath
/etc/grid-security/certificates -Verify 10 -quiet
verify depth is 10, must return a certificate
depth=1 /C=US/O=National Center for Supercomputing
Applications/OU=Certificate Authorities/CN=CACL
verify return:1
depth=0 /C=US/O=National Center for Supercomputing
Applications/OU=People/CN=Jim Basney
verify return:1

$ openssl s_client -connect localhost:9999 -CApath
/etc/grid-security/certificates -cert ~/.globus/usercert.pem -key
~/.globus/userkey.pem -quiet
Enter pass phrase for /Users/jbasney/.globus/userkey.pem:
depth=1 /C=US/O=National Center for Supercomputing
Applications/OU=Certificate Authorities/CN=CACL
verify return:1
depth=0 /C=US/O=National Center for Supercomputing
Applications/OU=Services/CN=example.edu
verify return:1

Maybe you can use these openssl commands to identify the certificate
problem in your setup.

On 9/7/11 10:08 AM, [email protected] wrote:
> the error shown is:
> 
> Error authenticating client: GSS Major Status: Authentication Failed GSS
> Minor Status Error Chain: globus_gsi_gssapi: SSLv3 handshake problems
> globus_gsi_gssapi: SSLv3 handshake problems: Couldn't do ssl handshake
> OpenSSL Error: rsa_eay.c:693: in library: rsa routines, function
> RSA_EAY_PUBLIC_DECRYPT: pkcs1 padding too short OpenSSL Error:
> rsa_eay.c:693: in library: rsa routines, function RSA_EAY_PUBLIC_DECRYPT:
> pkcs1 padding too short
> 
> it appears to be a decryption problem with the certificate cert.pem
> 
>> On 9/7/11 8:52 AM, [email protected] wrote:
>>> I wonder if this error ( "Error authenticating: Connection closed." ) is
>>> an authentication problem, some PAM issue with myproxy, or everything is
>>> the /etc/grid-security/certificates directory.
>>
>> To answer this question, check your myproxy-server logs:
>>
>> http://grid.ncsa.illinois.edu/myproxy/troubleshooting.html
>>
>> ____________________________________________________________________________________
>> Ein tolles Angebot. Waxing in Deiner Stadt bis -70%. Jetzt!
>> http://click.lavabit.com/h6p8e7memuaifbw61bw33t6gw39nzk8nt4c61gi646n5iehhha3b/
>> ____________________________________________________________________________________
>>

Reply via email to