search

dmwm / CRAB2

CRAB2
2 stars 11 forks source link

Default proxy length #961

Closed ericvaandering closed 10 years ago

ericvaandering commented 10 years ago

I just had a chat with Tony Tiradani. I gather that servers (e.g. DBS) that are SL6 will no longer work with 512 bit proxies. We don't have SL6 servers yet, but the solution is simple enough we may want to inoculate ourself now agains any issues. One can supply -bits 1024|2048|4096 on the command line for the voms-proxy-init command to generate a longer proxy.

1024 is the default in recent OSG clients and in the very latest (or maybe forthcoming) EMI client, but this change would allow older clients to be future proof. Maybe this is easy enough to do in 2_10?

belforte commented 10 years ago

easy yes, but.. is it needed ? current gLite UI 3.2.11 used e.g. at lxplus and LPC makes 1024-bit proxies already. We had not seen any hint of 512bit user's proxies around. changing v-p-i command in crab2 requires a new tag of ProdCommon, too much work.

ericvaandering commented 10 years ago

Ah, then I would say "no." I had understood 512 bits were common.

belforte commented 10 years ago

ok, let's close.