URL: <http://savannah.cern.ch/support/?124285> Summary: CRLs always downloaded when -crl:3 is set Project: XROOTD Submitted by: bbockelm Submitted on: 2011-10-25 22:24 Category: None Priority: 5 - Normal Severity: 3 - Normal Status: None Privacy: Public Assigned to: None Originator Email: Open/Closed: Open Discussion Lock: Any Operating System: None _______________________________________________________ Details: When FNAL runs with -crl:3 (i.e., requiring a valid CRLs), xrootd tries to download all the CRLs with wget. All other grid applications seem to think the CRL is valid except for Xrootd. Regardless, Xrootd shouldn't try to download the CRLs on its own - FNAL has a special setup to avoid having all 200 nodes perform a DOS-attack on the CAs. Can we disable having xrootd download CRLs, and investigate why it thinks they are invalid in the first place? Thanks _______________________________________________________ Reply to this item at: <http://savannah.cern.ch/support/?124285> _______________________________________________ Message sent via/by LCG Savannah http://savannah.cern.ch/