On Thu, 17 May 2012 at 1:21pm, Orlando Richards wrote
Date: Wed, 16 May 2012 11:09:35 -0400
From: Prentice Bisbal<[email protected]>
When I started using about 8 years ago, I was using CSP. In fact, CSP
was one of the main reasons I chose SGE over the other options (torque).
Unfortunately, I started getting SSL errors when using the certs, which
are outlined in the this e-mail the the mailing list from September of
2007:
http://arc.liv.ac.uk/pipermail/gridengine-users/2007-September/015678.html
I didn't get any replies from the list on how to fix this problem. I
dealt with this problem by generating new certificates, but then this
problem showed up again about 6 months later, so I generated new
certificates again. When I switched employers and implemented SGE again,
I opted not to use CSP to avoid having these errors again. I think CSP
is a great feature, one that I would use and advocate if it worked, but
unfortunately, it has issues, and no seems to want the feature enough to
make those issues a priority for developers.
We suffered from exactly that problem too - and worked around it by setting
up a weekly cron job to create new a qmaster cert. That was under 6.1 I
think, not sure if it still persists in our 6.2u5 deployment but we're still
running the cron job anyway.
Throwing a "me too" in here, I've also suffered from the main SSL certs
being reported as expired by SGE, even though they're still valid. I
would just generate new ones as needed. I will say that I had it happen
twice relatively quickly, and it hasn't happened for a while since. This
was also with 6.1.
--
Joshua Baker-LePain
QB3 Shared Cluster Sysadmin
UCSF
_______________________________________________
users mailing list
[email protected]
https://gridengine.org/mailman/listinfo/users
