search

ESGF / esgf-installer

ESGF P2P Node Installer
https://esgf.llnl.gov/
Other
21 stars 21 forks source link

myproxy fails to generate credentials (classic installer) #710

Closed pchengi closed 5 years ago

pchengi commented 5 years ago

myproxy fails to generate credentials, logging the following error on the server; this is related to issue #709 . This is directly caused do to the script /esg/config/myproxy/myproxy-certificate-mapapp producing output with spaces in unexpected places, as a result of the change in openssl version installed by Conda. The openssl installed by conda changed from 'OpenSSL 1.0.2p 14 Aug 2018' to OpenSSL 1.1.1a 20 Nov 2018 between the release of ESGF 2.8.1 and ESGF 2.8.2.

Feb 12 13:19:43 esg-idx myproxy-server[13255]: globus_gsi_cert_utils_get_x509_name() failed globus_cert_utils: Error parsing subject name: The name entry: O is not recognized as a valid OID Internal cert generation failed CA failed to generate certificate

pchengi commented 5 years ago

Observed behavior: [root@esg-idx ~]# /esg/config/myproxy/myproxy-certificate-mapapp testpub /O = ESGF/OU = ESGF.ORG/CN =https://esg-idx.demonet.local/esgf-idp/openid/testpub

Expected behavior: [root@esg-idx ~]# /esg/config/myproxy/myproxy-certificate-mapapp testpub /O=ESGF/OU=ESGF.ORG/CN=https://esg-idx.demonet.local/esgf-idp/openid/testpub

pchengi commented 5 years ago

fixed in e078d3cfceee9466cf7ea5edf6db8e263b026be0