Print

Print

So, let me get this correctly. When a redirector is in the loop, it fails when redirected to a 5.x data server but works when redirected to a <= 4.12.3 server. Is that correct?

In any case, it seems the issue is here:
200831 22:57:16 3487721 cryptossl_X509::CertType: certificate has 3 extensions
200831 22:57:16 3487721 anon.0:[log in to unmask] sysXrdHttp: Failed to extract DN information.

While the data server gets the cert it can't extract the DN. This particular error occurs in code recently added to handle certs in the "proper" way. In this case, a DN is required for anticipated use with a gridmap file. It would seem you would get the same problem with a 4.12.4-RCx data server which uses the same code to do this. Perhaps you can try that to verify that it's a problem in this new code.

Unfortunately, the newly added code does not propagate the debug settings to the underlying x509 library. You can force this by configuring gsi in xrootd with the proper debug flags set there.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1276#issuecomment-684106023", "url": "https://github.com/xrootd/xrootd/issues/1276#issuecomment-684106023", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1