Hi Gerardo -- Thanks, now I hit the next roadblock: the proxy generated includes an alternative name for the subject: X509v3 Subject Alternative Name: othername:<unsupported>, email:[log in to unmask] but the RFC forbids it: http://tools.ietf.org/html/rfc3820#section-3.5 And JGlobus checks it: https://github.com/jglobus/JGlobus/blob/master/ssl-proxies/src/main/java/org/globus/gsi/trustmanager/X509ProxyCertPathValidator.java#L503 --- Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/114#issuecomment-43910055 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1