Difference: CsGsiSupport (22 vs. 23)

Revision 232014-01-06 - rptaylor

Line: 1 to 1
 
META TOPICPARENT name="Restricted.ClosedCanarieProjectNEP52"
This page contains information on GSI support in the cloud scheduler.
Line: 33 to 33
 bffbd7d0
Changed:
<
<

Install GridCanada root CA package

>
>

Install CAs and fetch-crl

 If you haven't done so yet, you will need to install the GridCanada CA root package on your Cloud Scheduler system.
Changed:
<
<
For example:
>
>
Follow these instructions to install the standard EGI trust anchors, which include the GridCanada root CA.
 
Changed:
<
<
as user globus:
wget http://gridcanada.ca/ca/globus_simple_ca_bffbd7d0_setup-0.18.tar.gz
. $GLOBUS_LOCATION/etc/globus-user-env.sh
gpt-build globus_simple_ca_bffbd7d0_setup-0.18.tar.gz gcc64dbg
gpt-postinstall

as root:

$GLOBUS_LOCATION/setup/globus_simple_ca_bffbd7d0_setup/setup-gsi

It is also a good idea to install the GridCanada CA revocation list:

as root:

cd /etc/grid-security/certificates
wget http://gridcanada.ca/ca/bffbd7d0.r0

In order to avoid errors caused by x509 CA root cert hash inconsistencies, it is recommended that you create some simlinks for the new hash of the GridCanada CA root cert, as shown below:

as root:

cd /etc/grid-security/certificates
ln -s bffbd7d0.0 5d674a88.0
ln -s bffbd7d0.signing_policy 5d674a88.signing_policy
ln -s globus-host-ssl.conf.bffbd7d0 globus-host-ssl.conf.5d674a88
ln -s globus-user-ssl.conf.bffbd7d0 globus-user-ssl.conf.5d674a88
ln -s grid-security.conf.bffbd7d0 grid-security.conf.5d674a88
ln -s bffbd7d0.r0 5d674a88.r0
>
>
Now install fetch-crl:
 
Added:
>
>
  • /sbin/chkconfig fetch-crl-boot on
  • /sbin/chkconfig fetch-crl-cron on
  • /etc/init.d/fetch-crl-cron start
 

Install NEP-52 root CA package

Tip, idea If you already have your own CA that you can use to sign your own X509 certificates, you can install your CA package instead.
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback