With the US DST transition (March 9/10), CMS saw failures at US-CMS sites using a proxy certificate generated between 2-3am UTC:

Authentication with gsi failed: Secgsi: ErrParseBuffer: certificate chain
verification failed: Proxy: certificate expired: kXGC_cert

This issue did not appear for non-US sites using the same certificate and connections using proxies generated after 3am UTC worked with US sites. In the original support ticket [2], we proposed reproducing this ticket by setting up an XRootD server with its clock set to March 9/10 with a US time zone and a second host acting as a client set to the same time with a European time zone.

[1] http://wlcg-sam-cms.cern.ch/templates/ember/#/historicalsmry/heatMap?end_time=2019%2F03%2F10%2006%3A00&metrics=org.cms.SE-xrootd%20(connection)%2Corg.cms.SE-xrootd%20(contain)%2Corg.cms.SE-xrootd%20(read)%2Corg.cms.SE-xrootd%20(version)%2Corg.cms.WN-analysis%20(%2Fcms%2FRole_lcgadmin)%2Corg.cms.WN-xrootd-access%20(%2Fcms%2FRole_lcgadmin)&profile=CMS_CRITICAL_FULL&site=T1_US_FNAL%2CT2_BR_SPRACE%2CT2_US_Caltech%2CT2_US_Florida%2CT2_US_MIT%2CT2_US_Nebraska%2CT2_US_Purdue%2CT2_US_UCSD%2CT2_US_Vanderbilt%2CT2_US_Wisconsin&start_time=2019%2F03%2F10%2000%3A00&time=manual&view=Test%20History
[2] https://support.opensciencegrid.org/public/tickets/ae8dc3e90125b8499e6dd7a06ecfe6025ccad8a0e871b6d7dbd4cb34c00393a0

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1