Print

Print


Hopefully this has not been fixed in a newer release - I saw no mention in the changelogs...

We (CMS T2 UW-Madison) are running xrootd 4.8.0-2.osg33.el7 and have installed osg-ca-certs.noarch 1.73-1.osg33.el7 .

While experimenting with letsencrypt certs, xrootd displays the following message:
secgsi_GetSrvCertEnt: failed to load certificate for the issuing CA '4f06f81d.0|4a0a35c0.0'

There are files with is name pointing to xrootd certs:
ls -al /etc/grid-security/certificates/4f06f81d.0
lrwxrwxrwx. 1 root root 26 May 23 16:22 /etc/grid-security/certificates/4f06f81d.0 -> letsencryptauthorityx3.pem
ls -al /etc/grid-security/certificates/4a0a35c0.0
lrwxrwxrwx. 1 root root 26 May 23 16:22 /etc/grid-security/certificates/4a0a35c0.0 -> letsencryptauthorityx3.pem

Xrootd transfers fail mentioning "AUTH". (sorry, don't have exact message)

Switching back to OSG issued certs (or InCommon) allow xrootd to function normally.

Thanks!

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/716

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1