search

GENI-NSF / geni-ch

GENI clearinghouse services
Other
3 stars 6 forks source link

SERVICE_CERT is a local file path #580

Open nbastin opened 7 years ago

nbastin commented 7 years ago

The SERVICE_CERT member returned from lookup is a local path, not an actual cert:

           {'SERVICE_CERT': '/usr/share/geni-chapi/sr/certs/wvn-eg.pem',
            'SERVICE_DESCRIPTION': 'WVNET ExoGENI Rack',
            'SERVICE_NAME': 'WVNET ExoGENI',
            'SERVICE_TYPE': 0,
            'SERVICE_URL': 'https://wvn-hn.exogeni.net:11443/orca/xmlrpc',
            'SERVICE_URN': 'urn:publicid:IDN+exogeni.net:wvnvmsite+authority+am',
            '_GENI_SERVICE_ATTRIBUTES': {'SPEAKS_FOR': 't',
                                         'UI_AM_CAT': 'ui_experimental_cat ui_compute_cat',
                                         'UI_AM_TYPE': 'ui_exogeni_am'},
            '_GENI_SERVICE_CERT_FILENAME': '/usr/share/geni-chapi/sr/certs/wvn-eg.pem',
            '_GENI_SERVICE_ID': 417,
            '_GENI_SERVICE_SHORT_NAME': 'wvn-eg’},
tcmitchell commented 7 years ago

The service registry no longer requires certificates, and the recently added aggregates won't have a certificate, file name or otherwise. The certificates were required to support Flack, which was dropped a couple of years ago.

We should either remove the 'SERVICE_CERT' field from the return value for aggregates or we should change its value to an empty string.

tcmitchell commented 7 years ago

Oddly, there is code to fill in the contents of the certificate file. Why isn't that working? Perhaps this code should be resurrected, although as noted above, not all aggregates will have certificate information.