Renew Grid Certificate

From Atlas Wiki
Revision as of 11:49, 25 April 2008 by Gossie (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

A shortcut through the maze you enter when you want to renew your GRID certificate and/or if you need to re-sign the ATLAS VO 'I-promise-I-will-behave-on-the-Grid' statement:


1) Try to avoid breaking your head trying to understand what all computer/grid terms mean that you encounter.

2) Use the same password everywhere. You need many.

Of course this is not the safest thing you can do and actually there are only 3 disctinct passwords. If you do this, please be sure to use an EXTREMELY difficult password

1) Renewing your Grid Certificate

     run script
  B) Upload file to Dutch CA to start request
     File:     $HOME/.globus/newrekeypack.txt
  C) Save the certificate you get back by mail from the Dutch CA (~ 2 days) and follow instructions:
     - Save mail as .globus/usercert.pem
     - In .globus: mv newkey.pem userkey.pem

2) Resign the ATLAS things and Get Certificate in Browser (Mozilla)

  D) Get certificate as PKCS12 format (needed by browsers)
     In .globus:
     openssl pkcs12 -export -inkey userkey.pem -in usercert.pem -out my_cert.p12 -name MyGridCertificate
  E) Re-sign VO membership thingies (Grid and VO AUP ?)
     NB: if you have multiple certificates stored in your browser, use the certificate you created at D) to identify yourself 
         (otherwise you won't be able to re-sign the AUPs).