I setup my own simpleCA from GT 6.0.deb and use GT 6.0 toolkit sign usercert.pem and generate the x509up proxy certificates. I tried to use JGlobus to authenticate the GridFTPClient, it throws the Exceptions. However, I can do globus-url-copy without any issues. May you help on this, please?
BTW, I have to set MIN_TLS_PROTOCOL=TLS1_VERSION_DEPRECATED, otherwise the code will fail at the handshaking. I am not sure that is related or not.
Exception in thread "main" Authentication failed. Caused by Failure unspecified at GSS-API level. Caused by GSSException: Operation unauthorized (Mechanism level: [JGLOBUS-56] Authorization failed. Expected "/CN=host/chi-dyn-129-114-108-18.tacc.chameleoncloud.org" target but received "/O=Grid/OU=129.114.108.18/OU=simpleCA-smurf-tacc00.novalocal/CN=host/129.114.108.18")
at org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:1079)
at org.globus.ftp.extended.GridFTPControlChannel.authenticate(GridFTPControlChannel.java:209)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:127)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:103)
Hello:
I setup my own simpleCA from GT 6.0.deb and use GT 6.0 toolkit sign usercert.pem and generate the x509up proxy certificates. I tried to use JGlobus to authenticate the GridFTPClient, it throws the Exceptions. However, I can do globus-url-copy without any issues. May you help on this, please?
BTW, I have to set MIN_TLS_PROTOCOL=TLS1_VERSION_DEPRECATED, otherwise the code will fail at the handshaking. I am not sure that is related or not.