search

jglobus / JGlobus

jGlobus is a collection of Java client libraries for Globus® Toolkit security, GRAM, and GridFTP.
http://www.globus.org/toolkit/jglobus/
Apache License 2.0
24 stars 44 forks source link

Tests doesn't passes #35

Open romainreuillon opened 12 years ago

romainreuillon commented 12 years ago

During the compilation some tests doesn't go through in gss: Tests in error: testRequestConf3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testRequestConf4(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testWrap2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testWrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testWrap4(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testBadUnwrap1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testBadUnwrap2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testBadUnwrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testStreamInitAcceptContext(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testInquireByOidClientOnly(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testInquireByOidServerAlso(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testDelegation(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testNewDelegation(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testContextExpiration(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testLimitedProxyChecking(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testAnonymousClient1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testAnonymousClient2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testAnonymousServer1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testAnonymousServer2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testAnonymousServer3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testBadUsage1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testBadUsage2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testRequestConf1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testRequestConf2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testWrap1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: proxy not found] testImportExportOpaque(org.globus.gsi.gssapi.test.GlobusGSSCredentialTest): Defective credential detected [Caused by: proxy not found] testImportExportMechSpecific(org.globus.gsi.gssapi.test.GlobusGSSCredentialTest): Defective credential detected [Caused by: proxy not found] testInquireByOid(org.globus.gsi.gssapi.test.GlobusGSSCredentialTest): Defective credential detected [Caused by: proxy not found]

What do you need to diagnose what iis wrong?

bbockelm commented 12 years ago

Hi Romain,

It seems that these particular tests require a valid user proxy in the account running them. If I delete my proxy, I get similar errors.

Brian

bbockelm commented 11 years ago

Hi Romain,

Can you try re-running the tests with a valid proxy?

There are a few others (GRAM and GridFTP, in particular) which I'm not sure of how to run properly.

Brian

mjoldos commented 11 years ago

If I try to run the tests (mvn test) after using grid-proxy-init with my grid certificate I get a warnings and errors (see below). Any clue?

T E S T S

Running org.globus.gsi.SigningPolicyParserTest Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.247 sec Running org.globus.gsi.gridmap.GridMapTest [main] WARN gridmap.GridMap - User ID mapping missing: "/O=Grid/O=Globus/OU=mcs.anl.gov/CN=Katarzyna (Kate) Keahey" [main] WARN gridmap.GridMap - User ID mapping missing: dvorak Tests run: 7, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.036 sec Running org.globus.gsi.util.CertificateUtilTest Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.132 sec Running org.globus.gsi.util.TestSigningPolicyFileParser Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.027 sec Running org.globus.gsi.provider.FileBasedKeyStoreTest Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.02 sec Running org.globus.gsi.provider.simple.SimpleMemorySigningPolicyStoreTest Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.009 sec Running org.globus.gsi.provider.simple.SimpleMemoryCertStoreTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.019 sec Running org.globus.gsi.provider.simple.SimpleMemoryKeyStoreTest Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.046 sec Running org.globus.gsi.provider.TestPEMFileBasedKeyStore Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.245 sec Running org.globus.gsi.provider.TestTrustManager Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.022 sec Running org.globus.gsi.provider.TestProxyPathValidator Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.583 sec Running org.globus.gsi.bc.BouncyCastleUtilTest Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.057 sec Running org.globus.gsi.bc.BouncyCastleCertProcessingFactoryTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.176 sec Running org.globus.gsi.bc.BouncyCastleOpenSSLKeyTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.099 sec Running org.globus.gsi.OpenSSLKeyTest Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.016 sec Running org.globus.gsi.proxy.ProxyPathValidatorTest [main] WARN stores.ResourceSigningPolicyStore - Failed to load signing policy: 9117797f.signing_policy [main] WARN stores.ResourceSigningPolicyStore - Failed to load signing policy: 2abdd332.signing_policy [main] WARN stores.ResourceSigningPolicyStore - Failed to load signing policy: 84bf9ca6.signing_policy [main] WARN stores.ResourceSigningPolicyStore - Failed to load signing policy: f30e4b25.signing_policy [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=US,ST=UT,L=Salt Lake City,O=The USERTRUST Network,OU=http://www.usertrust.com,CN=UTN-USERFirst-Hardware [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=NET,DC=PRAGMA-GRID,CN=PRAGMA-UCSD CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=CO,O=Uniandes CA,O=UNIANDES,OU=DTI,CN=Uniandes CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=FR,O=CNRS,CN=CNRS2-Projets [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=DZ,DC=ARN,O=DZ e-Science GRID,CN=DZ e-Science CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=MD,DC=MD-Grid,O=RENAM,OU=Certification Authority,CN=MD-Grid CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=HR,O=edu,OU=srce,CN=SRCE CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=EG,O=EG-GRID,CN=EG-GRID Certification Authority [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=BR,DC=UFF,DC=IC,O=UFF LACGrid CA,CN=UFF Latin American and Caribbean Catch-all Grid CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=CN,DC=Grid,CN=Root Certificate Authority at CNIC [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=ORG,DC=SEE-GRID,CN=SEE-GRID CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=BR,O=ICPEDU,O=UFF BrGrid CA,CN=UFF Brazilian Grid Certification Authority [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=BE,OU=BEGRID,O=BELNET,CN=BEgrid CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=me,DC=ac,DC=MREN,CN=MREN-CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=cz,DC=cesnet-ca,O=CESNET CA,CN=CESNET CA 3 [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=CN,DC=Grid,DC=SDG,CN=Scientific Data Grid CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=SY,O=HIAST,CN=HIAST GRID CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert C=GB,ST=Greater Manchester,L=Salford,O=Comodo CA Limited,CN=AAA Certificate Services [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=EDU,DC=UTEXAS,DC=TACC,O=UT-AUSTIN,CN=TACC Classic CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=EDU,DC=UTEXAS,DC=TACC,O=UT-AUSTIN,CN=TACC Root CA [main] WARN gsi.TrustedCertificates - no signing policy for ca cert DC=HK,DC=HKU,DC=GRID,CN=HKU Grid CA Tests run: 11, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 4.612 sec Running org.globus.gsi.proxy.ext.ProxyCertInfoTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.001 sec Running org.globus.gsi.filestore.TestFileBasedKeyStore Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.001 sec Running org.globus.gsi.filestore.TestFileBasedTrustStore Main classpath: /home/jim/JGlobus/ssl-proxies/target/test-classes/testTrustStore/ Main classpath: /home/jim/JGlobus/ssl-proxies/target/test-classes/testTrustStore/ Main classpath: /home/jim/JGlobus/ssl-proxies/target/test-classes/testTrustStore/ Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.036 sec Running org.globus.gsi.filestore.TestFileBasedSigningPolicy Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.004 sec Running org.globus.gsi.filestore.TestFileBasedCRL Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.004 sec Running org.globus.gsi.filestore.TestFileBasedTrustAnchor Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.007 sec Running org.globus.common.ResourceManagerContactTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.002 sec Running org.globus.util.GlobusURLTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.002 sec Running org.globus.util.UtilTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 sec Running org.globus.util.StringTokenizerTest Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 sec Running org.globus.util.CircularBufferTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.001 sec

Results :

Tests run: 131, Failures: 0, Errors: 0, Skipped: 0

...

[INFO] - - - - - - - - [INFO] Building GSS-API implementation for SSL with proxies [INFO] task-segment: [test] [INFO] - - - - - - - - [INFO] [resources:resources {execution: default-resources}] [WARNING] Using platform encoding (UTF-8 actually) to copy filtered resources, i.e. build is platform dependent! [INFO] Copying 2 resources [INFO] [compiler:compile {execution: default-compile}] [INFO] Nothing to compile - all classes are up to date [INFO] [resources:testResources {execution: default-testResources}] [WARNING] Using platform encoding (UTF-8 actually) to copy filtered resources, i.e. build is platform dependent! [INFO] Copying 2 resources [INFO] [compiler:testCompile {execution: default-testCompile}] [INFO] Nothing to compile - all classes are up to date [INFO] [surefire:test {execution: default-test}] [INFO] Surefire report directory: /home/jim/JGlobus/gss/target/surefire-reports

T E S T S

Running org.globus.gsi.gssapi.jaas.GlobusSubjectTest Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.047 sec Running org.globus.gsi.gssapi.net.test.GssOutputStreamTest Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.073 sec Running org.globus.gsi.gssapi.test.GlobusGSSCredentialTest Tests run: 5, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 3.902 sec <<< FAILURE! Running org.globus.gsi.gssapi.test.GlobusGSSNameTest Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.025 sec Running org.globus.gsi.gssapi.test.GlobusGSSContextTest Tests run: 25, Failures: 0, Errors: 25, Skipped: 0, Time elapsed: 0.686 sec <<< FAILURE! Running org.globus.net.GSIHttpURLConnectionTest Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.075 sec

Results :

Tests in error: testImportExportMechSpecific(org.globus.gsi.gssapi.test.GlobusGSSCredentialTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testInquireByOid(org.globus.gsi.gssapi.test.GlobusGSSCredentialTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testInquireByOidClientOnly(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testInquireByOidServerAlso(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testDelegation(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testNewDelegation(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testContextExpiration(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testLimitedProxyChecking(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testAnonymousClient1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testAnonymousClient2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testAnonymousServer1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testAnonymousServer2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testAnonymousServer3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testBadUsage1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testBadUsage2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testRequestConf1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testRequestConf2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testRequestConf3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testRequestConf4(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testWrap1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testWrap2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testWrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testWrap4(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testBadUnwrap1(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testBadUnwrap2(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testBadUnwrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA] testStreamInitAcceptContext(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA]

Tests run: 49, Failures: 0, Errors: 27, Skipped: 0

Here is the output of grid-cert-diagnostics -p Checking Environment Variables

Checking if HOME is set... /home/jim Checking if GLOBUS_LOCATION is set... no Checking for default GLOBUS_LOCATION... /usr Checking if X509_CERT_DIR is set... no Checking if X509_USER_CERT is set... no Checking if X509_USER_KEY is set... no Checking if X509_USER_PROXY is set... no Checking if GRIDMAP is set... no

Checking Security Directories

Determining trusted cert path... /home/jim/.globus/certificates Checking for cog.properties... found WARNING: If the cog.properties file contains security properties, Java apps will ignore the security paths described in the GSI documentation Checking for default gridmap location... /home/jim/.gridmap Checking if default gridmap exists... yes

Checking Default Credentials

Determining certificate and key file names... ok Certificate Path: "/home/jim/.globus/usercert.pem" Key Path: "/home/jim/.globus/userkey.pem" Reading certificate... ok Reading private key... Enter GRID pass phrase for this identity: ok Checking Certificate Subject... "/DC=RO/DC=RomanianGRID/O=UTCluj/CN=Marius Joldos" Checking cert... ok Checking key... ok Checking that certificate contains an RSA key... ok Checking that private key is an RSA key... ok Checking that public and private keys have the same modulus... ok Checking certificate trust chain... ok Checking if subject is in gridmap... jim

Checking trusted certificates...

Getting trusted certificate list... Checking CA file /home/jim/.globus/certificates/877af676.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 877af676.0...ok (/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A) Checking if signing policy exists for 877af676.0... ok Verifying certificate chain for 877af676.0... ok Checking CA file /home/jim/.globus/certificates/1691b9ba.0... ok Checking that certificate hash matches filename... failed CA hash '87429ba3.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/7ecb2657.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 7ecb2657.0...ok (/C=DE/O=GermanGrid/CN=GridKa-CA) Checking if signing policy exists for 7ecb2657.0... ok Verifying certificate chain for 7ecb2657.0... ok Checking CA file /home/jim/.globus/certificates/3839294d.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 3839294d.0...ok (/C=TH/O=NECTEC/OU=GOC/CN=NECTEC GOC CA) Checking if signing policy exists for 3839294d.0... ok Verifying certificate chain for 3839294d.0... ok Checking CA file /home/jim/.globus/certificates/9dd23746.0... ok Checking that certificate hash matches filename... failed CA hash 'cd536adc.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/afe55e66.0... ok Checking that certificate hash matches filename... failed CA hash '83676c6b.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/ffc3d59b.0... ok Checking that certificate hash matches filename... failed CA hash '530f7122.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/94b468c6.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 94b468c6.0...ok (/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA) Checking if signing policy exists for 94b468c6.0... ok Verifying certificate chain for 94b468c6.0... ok Checking CA file /home/jim/.globus/certificates/60ef89df.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 60ef89df.0...ok (/DC=IN/DC=GARUDAINDIA/CN=Indian Grid Certification Authority) Checking if signing policy exists for 60ef89df.0... ok Verifying certificate chain for 60ef89df.0... ok Checking CA file /home/jim/.globus/certificates/1c3f2ca8.0... ok Checking that certificate hash matches filename... failed CA hash '12d0da68.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/4d12be1d.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 4d12be1d.0...ok (/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA 3) Checking if signing policy exists for 4d12be1d.0... ok Verifying certificate chain for 4d12be1d.0... ok Checking CA file /home/jim/.globus/certificates/295adc19.0... ok Checking that certificate hash matches filename... failed CA hash '089450c2.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/86b6fa2c.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 86b6fa2c.0...ok (/DC=LV/DC=latgrid/CN=Certification Authority for Latvian Grid) Checking if signing policy exists for 86b6fa2c.0... ok Verifying certificate chain for 86b6fa2c.0... ok Checking CA file /home/jim/.globus/certificates/684261aa.0... ok Checking that certificate hash matches filename... failed CA hash 'ef300431.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/1149214e.0... ok Checking that certificate hash matches filename... failed CA hash '30ffc224.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/b874affe.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b874affe.0...ok (/DC=org/DC=ugrid/CN=UGRID CA) Checking if signing policy exists for b874affe.0... ok Verifying certificate chain for b874affe.0... ok Checking CA file /home/jim/.globus/certificates/18bc5b05.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 18bc5b05.0...ok (/DC=RO/DC=RomanianGRID/O=ROSA/OU=Certification Authority/CN=RomanianGRID CA) Checking if signing policy exists for 18bc5b05.0... ok Verifying certificate chain for 18bc5b05.0... ok Checking CA file /home/jim/.globus/certificates/dd51b42a.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for dd51b42a.0...ok (/DC=ORG/DC=SEE-GRID/CN=SEE-GRID CA) Checking if signing policy exists for dd51b42a.0... ok Verifying certificate chain for dd51b42a.0... ok Checking CA file /home/jim/.globus/certificates/03b260e0.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 03b260e0.0...ok (/C=PL/O=GRID/CN=Polish Grid CA) Checking if signing policy exists for 03b260e0.0... ok Verifying certificate chain for 03b260e0.0... ok Checking CA file /home/jim/.globus/certificates/644888f9.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 644888f9.0...ok (/O=Grid/OU=GlobusTest/OU=simpleCA-acalgrid103.labacal.utcluj.ro/CN=Globus Simple CA) Checking if signing policy exists for 644888f9.0... ok Verifying certificate chain for 644888f9.0... ok Checking CA file /home/jim/.globus/certificates/4220f3a5.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 4220f3a5.0...ok (/DC=EDU/DC=UTEXAS/DC=TACC/O=UT-AUSTIN/CN=TACC Classic CA) Checking if signing policy exists for 4220f3a5.0... ok Verifying certificate chain for 4220f3a5.0... ok Checking CA file /home/jim/.globus/certificates/2a237f16.0... ok Checking that certificate hash matches filename... failed CA hash 'bca425d1.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/3f0f4285.0... ok Checking that certificate hash matches filename... failed CA hash 'd38446c5.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/24c3ccde.0... ok Checking that certificate hash matches filename... failed CA hash 'd71343e8.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/30feecdf.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 30feecdf.0...ok (/C=BE/OU=BEGRID/O=BELNET/CN=BEgrid CA) Checking if signing policy exists for 30feecdf.0... ok Verifying certificate chain for 30feecdf.0... ok Checking CA file /home/jim/.globus/certificates/719a853d.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 719a853d.0...ok (/DC=BR/DC=UFF/DC=IC/O=UFF LACGrid CA/CN=UFF Latin American and Caribbean Catch-all Grid CA) Checking if signing policy exists for 719a853d.0... ok Verifying certificate chain for 719a853d.0... ok Checking CA file /home/jim/.globus/certificates/a9082267.0... ok Checking that certificate hash matches filename... failed CA hash '719a853d.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/6e3b436b.0... ok Checking that certificate hash matches filename... failed CA hash '3de400d0.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/6cad3d39.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 6cad3d39.0...ok (/C=CO/O=Uniandes CA/O=UNIANDES/OU=DTI/CN=Uniandes CA) Checking if signing policy exists for 6cad3d39.0... ok Verifying certificate chain for 6cad3d39.0... ok Checking CA file /home/jim/.globus/certificates/ff94d436.0... ok Checking that certificate hash matches filename... failed CA hash '0e635db3.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/b1159c4c.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b1159c4c.0...ok (/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA) Checking if signing policy exists for b1159c4c.0... ok Verifying certificate chain for b1159c4c.0... ok Checking CA file /home/jim/.globus/certificates/e580c4f9.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for e580c4f9.0...ok (/C=IT/O=INFN/CN=INFN CA) Checking if signing policy exists for e580c4f9.0... ok Verifying certificate chain for e580c4f9.0... ok Checking CA file /home/jim/.globus/certificates/3fb4d8a6.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 3fb4d8a6.0...ok (/C=AM/O=ArmeSFo/CN=ArmeSFo CA) Checking if signing policy exists for 3fb4d8a6.0... ok Verifying certificate chain for 3fb4d8a6.0... ok Checking CA file /home/jim/.globus/certificates/25694cc4.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 25694cc4.0...ok (/DC=CN/DC=Grid/DC=SDG/CN=Scientific Data Grid CA) Checking if signing policy exists for 25694cc4.0... ok Verifying certificate chain for 25694cc4.0... ok Checking CA file /home/jim/.globus/certificates/1f0e8352.0... ok Checking that certificate hash matches filename... failed CA hash 'd0cd0b27.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/20ce830e.0... ok Checking that certificate hash matches filename... failed CA hash '9d772be7.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d11f973e.0... ok Checking that certificate hash matches filename... failed CA hash '585d9326.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/e8d818e6.0... ok Checking that certificate hash matches filename... failed CA hash '30feecdf.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/82c2b224.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 82c2b224.0...ok (/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1) Checking if signing policy exists for 82c2b224.0... ok Verifying certificate chain for 82c2b224.0... ok Checking CA file /home/jim/.globus/certificates/1f3834d0.0... ok Checking that certificate hash matches filename... failed CA hash '18bc5b05.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/9cd75e87.0... ok Checking that certificate hash matches filename... failed CA hash 'b459ca48.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/5d674a88.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 5d674a88.0...ok (/C=CA/O=Grid/CN=Grid Canada Certificate Authority) Checking if signing policy exists for 5d674a88.0... ok Verifying certificate chain for 5d674a88.0... ok Checking CA file /home/jim/.globus/certificates/5cf9d536.0... ok Checking that certificate hash matches filename... failed CA hash '080911ac.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/b7bcb7b2.0... ok Checking that certificate hash matches filename... failed CA hash '522b8537.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/75680d2e.0... ok Checking that certificate hash matches filename... failed CA hash 'ee64a828.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/8a047de1.0... ok Checking that certificate hash matches filename... failed CA hash '3839294d.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/3d5be7bc.0... ok Checking that certificate hash matches filename... failed CA hash '156a0f0f.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/6fee79b0.0... ok Checking that certificate hash matches filename... failed CA hash 'bfafd1bd.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/3232b9bc.0... ok Checking that certificate hash matches filename... failed CA hash '56084620.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/b459ca48.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b459ca48.0...ok (/C=TW/O=AS/CN=Academia Sinica Grid Computing Certification Authority Mercury) Checking if signing policy exists for b459ca48.0... ok Verifying certificate chain for b459ca48.0... ok Checking CA file /home/jim/.globus/certificates/1e4f9475.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 1e4f9475.0...ok (/C=MK/O=MARGI/CN=MARGI-CA) Checking if signing policy exists for 1e4f9475.0... ok Verifying certificate chain for 1e4f9475.0... ok Checking CA file /home/jim/.globus/certificates/27c32b54.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 27c32b54.0...ok (/O=Grid/OU=GlobusTest/OU=simpleCA-S10-1.site/CN=Globus Simple CA) Checking if signing policy exists for 27c32b54.0... ok Verifying certificate chain for 27c32b54.0... ok Checking CA file /home/jim/.globus/certificates/742edd45.0... ok Checking that certificate hash matches filename... failed CA hash '86b6fa2c.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/126f0acf.0... ok Checking that certificate hash matches filename... failed CA hash '036b3363.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/18700496.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 18700496.0...ok (/C=PK/O=NCP/CN=PK-GRID-CA) Checking if signing policy exists for 18700496.0... ok Verifying certificate chain for 18700496.0... ok Checking CA file /home/jim/.globus/certificates/c7a717ce.0... ok Checking that certificate hash matches filename... failed CA hash '82c2b224.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/cd536adc.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for cd536adc.0...ok (/DC=es/DC=irisgrid/CN=IRISGridCA) Checking if signing policy exists for cd536adc.0... ok Verifying certificate chain for cd536adc.0... ok Checking CA file /home/jim/.globus/certificates/156a0f0f.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 156a0f0f.0...ok (/C=SI/O=SiGNET/CN=SiGNET CA) Checking if signing policy exists for 156a0f0f.0... ok Verifying certificate chain for 156a0f0f.0... ok Checking CA file /home/jim/.globus/certificates/5a68802a.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 5a68802a.0...ok (/C=JP/O=National Research Grid Initiative/OU=CGRD/CN=NAREGI CA) Checking if signing policy exists for 5a68802a.0... ok Verifying certificate chain for 5a68802a.0... ok Checking CA file /home/jim/.globus/certificates/c7a3bf7e.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for c7a3bf7e.0...ok (/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006) Checking if signing policy exists for c7a3bf7e.0... ok Verifying certificate chain for c7a3bf7e.0... ok Checking CA file /home/jim/.globus/certificates/f4401b90.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for f4401b90.0...ok (/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA Root) Checking if signing policy exists for f4401b90.0... ok Verifying certificate chain for f4401b90.0... ok Checking CA file /home/jim/.globus/certificates/7d0d064a.0... ok Checking that certificate hash matches filename... failed CA hash '1e4f9475.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/522b8537.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 522b8537.0...ok (/C=AR/O=e-Ciencia/OU=UNLP/L=CeSPI/CN=PKIGrid) Checking if signing policy exists for 522b8537.0... ok Verifying certificate chain for 522b8537.0... ok Checking CA file /home/jim/.globus/certificates/d38446c5.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d38446c5.0...ok (/C=VE/O=Grid/O=Universidad de Los Andes/OU=CeCalCULA/CN=ULAGrid Certification Authority) Checking if signing policy exists for d38446c5.0... ok Verifying certificate chain for d38446c5.0... ok Checking CA file /home/jim/.globus/certificates/30ffc224.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 30ffc224.0...ok (/C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01) Checking if signing policy exists for 30ffc224.0... ok Verifying certificate chain for 30ffc224.0... ok Checking CA file /home/jim/.globus/certificates/585d9326.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 585d9326.0...ok (/C=FR/O=CNRS/CN=GRID2-FR) Checking if signing policy exists for 585d9326.0... ok Verifying certificate chain for 585d9326.0... ok Checking CA file /home/jim/.globus/certificates/bffbd7d0.0... ok Checking that certificate hash matches filename... failed CA hash '5d674a88.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/0a49430a.0... ok Checking that certificate hash matches filename... failed CA hash 'fdf90b95.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/82b36fca.0... ok Checking that certificate hash matches filename... failed CA hash 'c7a3bf7e.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/ef300431.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for ef300431.0...ok (/DC=EDU/DC=UTEXAS/DC=TACC/O=UT-AUSTIN/CN=TACC Root CA) Checking if signing policy exists for ef300431.0... ok Verifying certificate chain for ef300431.0... ok Checking CA file /home/jim/.globus/certificates/3de400d0.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 3de400d0.0...ok (/C=AT/O=AustrianGrid/OU=Certification Authority/CN=Certificate Issuer) Checking if signing policy exists for 3de400d0.0... ok Verifying certificate chain for 3de400d0.0... ok Checking CA file /home/jim/.globus/certificates/be87b272.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for be87b272.0...ok (/C=PT/O=LIPCA/CN=LIP Certification Authority) Checking if signing policy exists for be87b272.0... ok Verifying certificate chain for be87b272.0... ok Checking CA file /home/jim/.globus/certificates/e13e0fcf.0... ok Checking that certificate hash matches filename... failed CA hash 'e21dc0c0.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/74c6eaeb.0... ok Checking that certificate hash matches filename... failed CA hash 'bb01cea1.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/b3222f9e.0... ok Checking that certificate hash matches filename... failed CA hash '3154fd00.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/163af95c.0... ok Checking that certificate hash matches filename... failed CA hash '727146a8.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/1e12d831.0... ok Checking that certificate hash matches filename... failed CA hash '7cef5492.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/709bed08.0... ok Checking that certificate hash matches filename... failed CA hash 'b1ac0d46.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d800b164.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d800b164.0...ok (/C=BM/O=QuoVadis Limited/OU=Issuing Certification Authority/CN=QuoVadis Grid ICA) Checking if signing policy exists for d800b164.0... ok Verifying certificate chain for d800b164.0... ok Checking CA file /home/jim/.globus/certificates/617ff41b.0... ok Checking that certificate hash matches filename... failed CA hash '2f2f573f.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/468d15b3.0... ok Checking that certificate hash matches filename... failed CA hash 'dd51b42a.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/2418a3f3.0... ok Checking that certificate hash matches filename... failed CA hash '13ba0088.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/e2023333.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for e2023333.0...ok (/DC=CN/DC=Grid/CN=Root Certificate Authority at CNIC) Checking if signing policy exists for e2023333.0... ok Verifying certificate chain for e2023333.0... ok Checking CA file /home/jim/.globus/certificates/c48c63f3.0... ok Checking that certificate hash matches filename... failed CA hash '25694cc4.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/58b08cb5.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 58b08cb5.0...ok (/DC=MY/DC=UPM/DC=MYIFAM/C=MY/O=MYIFAM/CN=Malaysian Identity Federation and Access Management) Checking if signing policy exists for 58b08cb5.0... ok Verifying certificate chain for 58b08cb5.0... ok Checking CA file /home/jim/.globus/certificates/b1ac0d46.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b1ac0d46.0...ok (/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority) Checking if signing policy exists for b1ac0d46.0... ok Verifying certificate chain for b1ac0d46.0... ok Checking CA file /home/jim/.globus/certificates/87429ba3.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 87429ba3.0...ok (/C=TR/O=TRGrid/CN=TR-Grid CA) Checking if signing policy exists for 87429ba3.0... ok Verifying certificate chain for 87429ba3.0... ok Checking CA file /home/jim/.globus/certificates/bfafd1bd.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for bfafd1bd.0...ok (/C=IL/O=IUCC/CN=IUCC/emailAddress=ca@mail.iucc.ac.il) Checking if signing policy exists for bfafd1bd.0... ok Verifying certificate chain for bfafd1bd.0... ok Checking CA file /home/jim/.globus/certificates/4798da47.0... ok Checking that certificate hash matches filename... failed CA hash '03a1fa38.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/1d879c6c.0... ok Checking that certificate hash matches filename... failed CA hash 'b2a87ac7.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/fb4b1346.0... ok Checking that certificate hash matches filename... failed CA hash 'ab7ddde3.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/2c0df5ae.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 2c0df5ae.0...ok (/DC=TW/DC=ORG/DC=NCHC/CN=NCHC CA) Checking if signing policy exists for 2c0df5ae.0... ok Verifying certificate chain for 2c0df5ae.0... ok Checking CA file /home/jim/.globus/certificates/dfb080e4.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for dfb080e4.0...ok (/C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth) Checking if signing policy exists for dfb080e4.0... ok Verifying certificate chain for dfb080e4.0... ok Checking CA file /home/jim/.globus/certificates/d1b603c3.0... ok Checking that certificate hash matches filename... failed CA hash '0119347c.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/2eb756e6.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 2eb756e6.0...ok (/DC=ch/DC=cern/CN=CERN Root CA) Checking if signing policy exists for 2eb756e6.0... ok Verifying certificate chain for 2eb756e6.0... ok Checking CA file /home/jim/.globus/certificates/e21dc0c0.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for e21dc0c0.0...ok (/C=SK/O=SlovakGrid/CN=SlovakGrid CA) Checking if signing policy exists for e21dc0c0.0... ok Verifying certificate chain for e21dc0c0.0... ok Checking CA file /home/jim/.globus/certificates/28a58577.0... ok Checking that certificate hash matches filename... failed CA hash '524cae41.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/2f3fadf6.0... ok Checking that certificate hash matches filename... failed CA hash 'e580c4f9.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/07397040.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 07397040.0...ok (/DC=MD/DC=MD-Grid/O=RENAM/OU=Certification Authority/CN=MD-Grid CA) Checking if signing policy exists for 07397040.0... ok Verifying certificate chain for 07397040.0... ok Checking CA file /home/jim/.globus/certificates/367b75c3.0... ok Checking that certificate hash matches filename... failed CA hash '53729190.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/13ba0088.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 13ba0088.0...ok (/DC=bg/DC=acad/CN=BG.ACAD CA) Checking if signing policy exists for 13ba0088.0... ok Verifying certificate chain for 13ba0088.0... ok Checking CA file /home/jim/.globus/certificates/a317c467.0... ok Checking that certificate hash matches filename... failed CA hash '075047ca.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/1b2e5552.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 1b2e5552.0...ok (/C=EG/O=EG-GRID/CN=EG-GRID Certification Authority) Checking if signing policy exists for 1b2e5552.0... ok Verifying certificate chain for 1b2e5552.0... ok Checking CA file /home/jim/.globus/certificates/ff430c7f.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for ff430c7f.0...ok (/C=CH/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/CN=SWITCHgrid Root CA) Checking if signing policy exists for ff430c7f.0... ok Verifying certificate chain for ff430c7f.0... ok Checking CA file /home/jim/.globus/certificates/cc5645bd.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for cc5645bd.0...ok (/C=RS/O=AEGIS/CN=AEGIS-CA) Checking if signing policy exists for cc5645bd.0... ok Verifying certificate chain for cc5645bd.0... ok Checking CA file /home/jim/.globus/certificates/0a12b607.0... ok Checking that certificate hash matches filename... failed CA hash 'b874affe.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/722e5071.0... ok Checking that certificate hash matches filename... failed CA hash '9036db5e.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/a87d9192.0... ok Checking that certificate hash matches filename... failed CA hash '5a68802a.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/ba2f39ca.0... ok Checking that certificate hash matches filename... failed CA hash 'd3619baa.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d0b701c0.0... ok Checking that certificate hash matches filename... failed CA hash 'ff430c7f.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/fdf90b95.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for fdf90b95.0...ok (/DC=DZ/DC=ARN/O=DZ e-Science GRID/CN=DZ e-Science CA) Checking if signing policy exists for fdf90b95.0... ok Verifying certificate chain for fdf90b95.0... ok Checking CA file /home/jim/.globus/certificates/e5cc84c2.0... ok Checking that certificate hash matches filename... failed CA hash '4220f3a5.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/da75f6a8.0... ok Checking that certificate hash matches filename... failed CA hash '60ef89df.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/0e635db3.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 0e635db3.0...ok (/C=HR/O=edu/OU=srce/CN=SRCE CA) Checking if signing policy exists for 0e635db3.0... ok Verifying certificate chain for 0e635db3.0... ok Checking CA file /home/jim/.globus/certificates/157753a5.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 157753a5.0...ok (/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root) Checking if signing policy exists for 157753a5.0... ok Verifying certificate chain for 157753a5.0... ok Checking CA file /home/jim/.globus/certificates/dd4b34ea.0... ok Checking that certificate hash matches filename... failed CA hash '7ecb2657.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/74a04bb6.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 74a04bb6.0...ok (/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA) Checking if signing policy exists for 74a04bb6.0... ok Verifying certificate chain for 74a04bb6.0... ok Checking CA file /home/jim/.globus/certificates/55994d72.0... ok Checking that certificate hash matches filename... failed CA hash '94b468c6.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/7cef5492.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 7cef5492.0...ok (/C=AU/O=APACGrid/OU=CA/CN=APACGrid/emailAddress=camanager@vpac.org) Checking if signing policy exists for 7cef5492.0... ok Verifying certificate chain for 7cef5492.0... ok Checking CA file /home/jim/.globus/certificates/712ae4cc.0... ok Checking that certificate hash matches filename... failed CA hash '4d12be1d.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/38f7145f.0... ok Checking that certificate hash matches filename... failed CA hash '67707166.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/530f7122.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 530f7122.0...ok (/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B) Checking if signing policy exists for 530f7122.0... ok Verifying certificate chain for 530f7122.0... ok Checking CA file /home/jim/.globus/certificates/9ff26ea4.0... ok Checking that certificate hash matches filename... failed CA hash '07397040.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/e72045ce.0... ok Checking that certificate hash matches filename... failed CA hash 'd800b164.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/12d0da68.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 12d0da68.0...ok (/DC=org/DC=DOEGrids/OU=Certificate Authorities/CN=DOEGrids CA 1) Checking if signing policy exists for 12d0da68.0... ok Verifying certificate chain for 12d0da68.0... ok Checking CA file /home/jim/.globus/certificates/53729190.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 53729190.0...ok (/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA) Checking if signing policy exists for 53729190.0... ok Verifying certificate chain for 53729190.0... ok Checking CA file /home/jim/.globus/certificates/ce33db76.0... ok Checking that certificate hash matches filename... failed CA hash 'd072977b.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d0cd0b27.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d0cd0b27.0...ok (/O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority) Checking if signing policy exists for d0cd0b27.0... ok Verifying certificate chain for d0cd0b27.0... ok Checking CA file /home/jim/.globus/certificates/080911ac.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 080911ac.0...ok (/C=BM/O=QuoVadis Limited/OU=Root Certification Authority/CN=QuoVadis Root Certification Authority) Checking if signing policy exists for 080911ac.0... ok Verifying certificate chain for 080911ac.0... ok Checking CA file /home/jim/.globus/certificates/1e3261e6.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 1e3261e6.0...ok (/C=HU/O=NIIF/OU=Certificate Authorities/CN=NIIF Root CA) Checking if signing policy exists for 1e3261e6.0... ok Verifying certificate chain for 1e3261e6.0... ok Checking CA file /home/jim/.globus/certificates/7022e3c4.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 7022e3c4.0...ok (/C=FR/O=CNRS/CN=CNRS2-Projets) Checking if signing policy exists for 7022e3c4.0... ok Verifying certificate chain for 7022e3c4.0... ok Checking CA file /home/jim/.globus/certificates/33eb0f86.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 33eb0f86.0...ok (/C=BR/O=ICPEDU/O=UFF BrGrid CA/CN=UFF Brazilian Grid Certification Authority) Checking if signing policy exists for 33eb0f86.0... ok Verifying certificate chain for 33eb0f86.0... ok Checking CA file /home/jim/.globus/certificates/98ef0ee5.0... ok Checking that certificate hash matches filename... failed CA hash '7ed47087.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/fc1898ec.0... ok Checking that certificate hash matches filename... failed CA hash '6cad3d39.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/bca425d1.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for bca425d1.0...ok (/DC=org/DC=balticgrid/CN=Baltic Grid Certification Authority) Checking if signing policy exists for bca425d1.0... ok Verifying certificate chain for bca425d1.0... ok Checking CA file /home/jim/.globus/certificates/2694e4f2.0... ok Checking that certificate hash matches filename... failed CA hash '74a04bb6.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/ee64a828.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for ee64a828.0...ok (/C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services) Checking if signing policy exists for ee64a828.0... ok Verifying certificate chain for ee64a828.0... ok Checking CA file /home/jim/.globus/certificates/0a2bac92.0... ok Checking that certificate hash matches filename... failed CA hash '33eb0f86.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/089450c2.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 089450c2.0...ok (/C=CL/O=REUNACA/CN=REUNA Certification Authority) Checking if signing policy exists for 089450c2.0... ok Verifying certificate chain for 089450c2.0... ok Checking CA file /home/jim/.globus/certificates/4a96b1ea.0... ok Checking that certificate hash matches filename... failed CA hash '1b2e5552.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/8a661490.0... ok Checking that certificate hash matches filename... failed CA hash '03b260e0.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/3154fd00.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 3154fd00.0...ok (/C=JO/O=JUNet/CN=JUNet CA) Checking if signing policy exists for 3154fd00.0... ok Verifying certificate chain for 3154fd00.0... ok Checking CA file /home/jim/.globus/certificates/d254cc30.0... ok Checking that certificate hash matches filename... failed CA hash '2eb756e6.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/1b6f5ede.0... ok Checking that certificate hash matches filename... failed CA hash '877af676.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/16da7552.0... ok Checking that certificate hash matches filename... failed CA hash 'dfb080e4.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/2f2f573f.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 2f2f573f.0...ok (/C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority) Checking if signing policy exists for 2f2f573f.0... ok Verifying certificate chain for 2f2f573f.0... ok Checking CA file /home/jim/.globus/certificates/d072977b.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d072977b.0...ok (/C=IR/O=IPM/O=IRAN-GRID/CN=IRAN-GRID CA) Checking if signing policy exists for d072977b.0... ok Verifying certificate chain for d072977b.0... ok Checking CA file /home/jim/.globus/certificates/ff783690.0... ok Checking that certificate hash matches filename... failed CA hash 'b13cc6df.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/bb01cea1.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for bb01cea1.0...ok (/C=SY/O=HIAST/CN=HIAST GRID CA) Checking if signing policy exists for bb01cea1.0... ok Verifying certificate chain for bb01cea1.0... ok Checking CA file /home/jim/.globus/certificates/f5ead794.0... ok Checking that certificate hash matches filename... failed CA hash '18700496.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/7721d4d3.0... ok Checking that certificate hash matches filename... failed CA hash '2376bd8e.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/83676c6b.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 83676c6b.0...ok (/C=CY/O=CyGrid/O=HPCL/CN=CyGridCA) Checking if signing policy exists for 83676c6b.0... ok Verifying certificate chain for 83676c6b.0... ok Checking CA file /home/jim/.globus/certificates/3c58f906.0... ok Checking that certificate hash matches filename... failed CA hash '157753a5.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/752dd30c.0... ok Checking that certificate hash matches filename... failed CA hash '644888f9.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/7ed47087.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 7ed47087.0...ok (/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root) Checking if signing policy exists for 7ed47087.0... ok Verifying certificate chain for 7ed47087.0... ok Checking CA file /home/jim/.globus/certificates/71a89a47.0... ok Checking that certificate hash matches filename... failed CA hash '2c0df5ae.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/0119347c.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 0119347c.0...ok (/DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1) Checking if signing policy exists for 0119347c.0... ok Verifying certificate chain for 0119347c.0... ok Checking CA file /home/jim/.globus/certificates/b2a87ac7.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b2a87ac7.0...ok (/DC=ch/DC=cern/CN=CERN Trusted Certification Authority) Checking if signing policy exists for b2a87ac7.0... ok Verifying certificate chain for b2a87ac7.0... ok Checking CA file /home/jim/.globus/certificates/9d772be7.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 9d772be7.0...ok (/C=NL/O=TERENA/CN=TERENA eScience SSL CA) Checking if signing policy exists for 9d772be7.0... ok Verifying certificate chain for 9d772be7.0... ok Checking CA file /home/jim/.globus/certificates/075047ca.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 075047ca.0...ok (/C=JP/O=AIST/OU=GRID/CN=Certificate Authority) Checking if signing policy exists for 075047ca.0... ok Verifying certificate chain for 075047ca.0... ok Checking CA file /home/jim/.globus/certificates/393f7863.0... ok Checking that certificate hash matches filename... failed CA hash 'cc5645bd.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/67707166.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 67707166.0...ok (/C=US/O=DigiCert Grid/OU=www.digicert.com/CN=DigiCert Grid Trust CA) Checking if signing policy exists for 67707166.0... ok Verifying certificate chain for 67707166.0... ok Checking CA file /home/jim/.globus/certificates/4ce1cf99.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 4ce1cf99.0...ok (/C=MA/O=MaGrid/CN=MaGrid CA) Checking if signing policy exists for 4ce1cf99.0... ok Verifying certificate chain for 4ce1cf99.0... ok Checking CA file /home/jim/.globus/certificates/9036db5e.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 9036db5e.0...ok (/C=KR/O=KISTI/O=GRID/CN=KISTI Grid Certificate Authority) Checking if signing policy exists for 9036db5e.0... ok Verifying certificate chain for 9036db5e.0... ok Checking CA file /home/jim/.globus/certificates/03a1fa38.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 03a1fa38.0...ok (/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA) Checking if signing policy exists for 03a1fa38.0... ok Verifying certificate chain for 03a1fa38.0... ok Checking CA file /home/jim/.globus/certificates/b13cc6df.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for b13cc6df.0...ok (/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Hardware) Checking if signing policy exists for b13cc6df.0... ok Verifying certificate chain for b13cc6df.0... ok Checking CA file /home/jim/.globus/certificates/727146a8.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 727146a8.0...ok (/C=FR/O=CNRS/CN=CNRS2) Checking if signing policy exists for 727146a8.0... ok Verifying certificate chain for 727146a8.0... ok Checking CA file /home/jim/.globus/certificates/69105f4f.0... ok Checking that certificate hash matches filename... failed CA hash 'b1159c4c.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d33760ec.0... ok Checking that certificate hash matches filename... failed CA hash '58b08cb5.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/56084620.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 56084620.0...ok (/DC=me/DC=ac/DC=MREN/CN=MREN-CA) Checking if signing policy exists for 56084620.0... ok Verifying certificate chain for 56084620.0... ok Checking CA file /home/jim/.globus/certificates/b2771d44.0... ok Checking that certificate hash matches filename... failed CA hash 'e2023333.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d0c2a341.0... ok Checking that certificate hash matches filename... failed CA hash '3fb4d8a6.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/7b54708e.0... ok Checking that certificate hash matches filename... failed CA hash '4ce1cf99.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/edca0fc0.0... ok Checking that certificate hash matches filename... failed CA hash 'f4401b90.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/cc800af0.0... ok Checking that certificate hash matches filename... failed CA hash '1e3261e6.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/09ff08b7.0... ok Checking that certificate hash matches filename... failed CA hash '7022e3c4.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/d3619baa.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d3619baa.0...ok (/C=CN/O=HEP/CN=gridca-cn/emailAddress=gridca@ihep.ac.cn) Checking if signing policy exists for d3619baa.0... ok Verifying certificate chain for d3619baa.0... ok Checking CA file /home/jim/.globus/certificates/2376bd8e.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 2376bd8e.0...ok (/DC=NET/DC=PRAGMA-GRID/CN=PRAGMA-UCSD CA) Checking if signing policy exists for 2376bd8e.0... ok Verifying certificate chain for 2376bd8e.0... ok Checking CA file /home/jim/.globus/certificates/d71343e8.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for d71343e8.0...ok (/C=MX/O=UNAMgrid/OU=UNAM/CN=CA) Checking if signing policy exists for d71343e8.0... ok Verifying certificate chain for d71343e8.0... ok Checking CA file /home/jim/.globus/certificates/11b4a5a2.0... ok Checking that certificate hash matches filename... failed CA hash 'be87b272.0' does not match CA filename Checking CA file /home/jim/.globus/certificates/524cae41.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 524cae41.0...ok (/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid Root CA 2006) Checking if signing policy exists for 524cae41.0... ok Verifying certificate chain for 524cae41.0... ok Checking CA file /home/jim/.globus/certificates/036b3363.0... ok Checking that certificate hash matches filename... ok Checking CA certificate name for 036b3363.0...ok (/C=BR/O=ANSP/OU=ANSPGrid CA/CN=ANSPGrid CA) Checking if signing policy exists for 036b3363.0... ok Verifying certificate chain for 036b3363.0... ok

Marius.Joldos@cs.utcluj.ro

bbockelm commented 11 years ago

Hi,

This error message catches my eye:

testWrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA]

Do you have a valid signing policy file available for RomainianGRID CA in this setup?

Brian

mjoldos commented 11 years ago

On 04/01/2013 04:02 PM, Brian Bockelman wrote:

Hi,

This error message catches my eye:

testWrap3(org.globus.gsi.gssapi.test.GlobusGSSContextTest): Defective credential detected [Caused by: java.security.cert.CertPathValidatorException: No signing policy for DC=RO,DC=RomanianGRID,O=ROSA,OU=Certification Authority,CN=RomanianGRID CA]

Do you have a valid signing policy file available for RomainianGRID CA in this setup?

Brian

— Reply to this email directly or view it on GitHub https://github.com/jglobus/JGlobus/issues/35#issuecomment-15714457.

Yes, there is. There is a grid-cert-diagnostics which confirms it (it is below the error message)

Marius Joldos Computer Science Dept. Technical University of Cluj-Napoca G. Baritiu 28, sala 10 Dorobantilor 71-73, sala D3 +40-264-202370, 401276 http://users.utcluj.ro/~jim