@stlammel: Andy is saying it would be good to see and compare new cert against old one that Polish folks used. Can you ask them if they can run openssl x509 -text -noout -in /etc/grid-security/certificates/4ba9a797.0 but instead 4ba9a797.0 use the old one? Not sure from where I could get it, perhaps they still have it, somewhere? For the record, here how the new cert looks like, @abh3:

$ openssl x509 -text -noout -in /etc/grid-security/certificates/4ba9a797.0
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 0 (0x0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=PL, O=GRID, CN=Polish Grid CA 2019
        Validity
            Not Before: Jun  1 00:00:00 2019 GMT
            Not After : Jun  1 00:00:00 2039 GMT
        Subject: C=PL, O=GRID, CN=Polish Grid CA 2019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b0:f2:eb:2b:07:88:1d:1f:3e:61:4d:10:3b:58:
                    91:01:23:de:71:79:d3:48:cf:8b:7d:3e:f5:46:90:
                    67:a6:e9:eb:5a:5e:cb:01:b9:91:93:40:94:95:37:
                    d7:6e:94:94:ed:5f:e4:8e:50:26:7e:13:78:d2:58:
                    59:84:02:3a:5c:38:13:fe:ea:70:a3:e9:3f:5d:da:
                    95:ff:9f:63:26:89:07:e0:89:70:88:2d:06:e9:bc:
                    3c:97:e5:cd:b3:93:e9:a2:05:9d:83:31:56:3a:4a:
                    bf:38:04:1f:57:e3:6a:a4:a7:7c:1a:ce:ff:1d:00:
                    f3:dc:e5:aa:7a:0d:83:98:4b:a8:04:48:84:54:d9:
                    43:15:79:db:c0:0f:9d:95:fb:07:3c:72:d9:f9:83:
                    62:48:91:3f:67:27:2d:e9:01:b9:3d:8d:f6:35:05:
                    ea:7c:75:25:f6:fb:b3:54:72:93:8a:ac:da:ee:44:
                    d7:14:c0:bb:f4:c3:d8:be:05:a0:5d:5c:b9:e4:a1:
                    f9:6a:bd:8b:10:ca:87:47:1c:be:ed:b1:1a:4f:fb:
                    35:5b:de:f9:69:3a:12:5b:40:f1:a6:0e:3f:75:de:
                    ca:a7:ba:ed:39:26:81:bb:6b:34:5c:38:28:14:38:
                    8e:b9:c3:85:d0:dd:48:19:9c:9f:4b:1b:b3:15:d4:
                    32:16:68:5f:0b:d4:3a:1a:41:f1:6d:f2:23:91:96:
                    6b:de:7a:0e:ae:12:59:d8:2a:45:34:07:c5:78:2b:
                    f0:49:b4:f0:97:8b:79:6f:98:6e:1c:84:b3:bf:92:
                    65:a7:95:d1:68:3c:35:10:79:cb:fb:25:93:08:fa:
                    78:98:b0:cb:29:45:5f:d0:4e:d7:eb:31:03:7c:75:
                    d3:65:6b:99:d2:e1:99:d8:04:0c:62:22:36:e5:09:
                    73:33:94:93:3a:ff:72:87:4a:bf:35:bf:b9:81:aa:
                    0f:88:61:4d:3f:77:95:ca:aa:c7:54:71:7f:ee:02:
                    2e:28:fc:f0:de:f2:38:e1:a3:ef:6a:8c:c3:62:aa:
                    59:85:20:d0:8a:bd:ad:e5:b7:05:9a:67:2a:ca:a3:
                    85:c7:0d:8a:e9:06:69:92:98:ad:d4:c3:7d:8f:f4:
                    a1:aa:a8:d3:ca:23:6d:a9:b1:48:02:73:28:84:25:
                    e6:69:36:a4:30:7a:46:f0:37:81:c1:3e:43:98:60:
                    68:1b:f8:67:b6:6b:c8:ef:6a:6f:11:7a:be:4a:22:
                    0b:c4:46:5b:e9:db:77:0b:df:ad:d8:ee:1d:b8:1b:
                    25:30:c7:0e:e2:21:cb:1e:cd:2f:bf:fc:cf:9b:69:
                    0b:ec:3c:d9:50:d6:28:1a:54:30:ce:5a:ef:ab:ce:
                    2f:e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                71:0E:D7:E6:0C:28:83:A3:4A:82:E0:C8:C5:97:CF:A8:09:8B:30:5A
            X509v3 Authority Key Identifier: 
                keyid:71:0E:D7:E6:0C:28:83:A3:4A:82:E0:C8:C5:97:CF:A8:09:8B:30:5A

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:4c:7c:0d:76:7a:a7:4a:f1:7f:48:6a:89:f6:e3:68:67:
         c4:91:45:21:9c:a8:44:f3:71:7d:5e:97:7d:12:d0:af:9b:e8:
         bf:e0:e1:fa:40:58:a6:c2:d1:e6:dc:06:5e:af:b8:a1:c9:aa:
         db:c4:2f:ee:1b:73:e4:5c:02:bd:68:7b:61:e7:52:01:64:56:
         df:9a:f6:40:3e:41:c9:ba:b1:dd:23:22:77:5e:7a:df:c6:51:
         3f:d2:45:6d:a1:89:31:cb:48:50:3c:01:39:be:64:16:a7:d2:
         77:2d:9a:ba:92:75:ca:68:2a:a0:0f:26:89:8c:c8:03:65:b4:
         43:3a:76:a4:e8:68:02:df:85:ec:d7:fa:ad:6a:6b:9f:14:9a:
         7e:1f:f1:c7:f0:84:62:9d:13:e2:e9:5d:db:e9:4d:83:d2:85:
         82:e6:e4:da:dd:7c:27:29:0b:d5:63:f4:30:28:2a:77:dd:60:
         d3:9a:8b:ca:a8:c4:d4:76:81:63:ce:60:ca:01:ad:cd:79:04:
         98:7b:77:7e:42:c4:b5:a2:cb:67:19:5f:99:2a:8e:e8:53:a3:
         43:fa:db:bf:2c:6a:9f:b6:2e:d4:f2:eb:22:a7:7f:fa:06:2b:
         6d:e3:e8:1e:05:b9:85:d5:02:06:fe:6a:9f:ea:8f:cd:ce:06:
         45:22:4c:63:95:58:8a:6f:f2:f1:9c:08:9b:32:2b:64:ee:11:
         68:61:50:f8:dd:7d:78:75:69:7f:15:9a:63:4e:53:cc:9e:d0:
         3e:3c:83:2d:38:1b:95:b4:17:9f:d1:3f:ac:68:2b:fc:9d:5d:
         60:93:5e:ff:64:c2:3b:9c:5e:67:84:57:53:a4:d9:7b:0c:52:
         dd:cc:47:49:e9:98:18:6d:ce:10:e3:e0:d9:0d:70:7e:ee:1c:
         5c:23:37:ce:7a:b8:c1:7f:54:93:d0:bb:b2:f3:0f:a3:b8:48:
         28:91:34:3f:b9:0b:85:06:5c:c0:05:1d:2d:e5:f9:4d:24:f2:
         a6:cf:44:1f:5f:cd:44:d3:e8:63:c9:08:3e:e2:55:2e:7e:f9:
         be:c0:f1:7a:2f:86:1a:53:f5:ad:08:4a:8b:5b:e6:f3:0b:11:
         78:60:25:70:54:69:5e:1f:3a:74:4a:45:de:3b:93:64:f4:a0:
         45:f8:9a:6e:41:7a:e1:fb:6c:90:d4:2f:eb:0b:31:84:9a:9f:
         8e:23:0b:4d:7f:be:39:06:d7:85:b5:14:bf:ee:1c:dd:ba:1b:
         88:94:5b:49:86:30:e9:f3:29:10:d3:a7:23:22:6a:a8:8b:73:
         b0:b7:eb:4d:f2:ab:14:c2:67:5a:30:dd:55:e5:b3:f3:9d:5d:
         66:d1:ee:6d:8f:c0:2e:81

Thanks,
Marian

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1