FW: Globus CA question

[Ivan R. Judson]

Seems like by Mar release we should just pull the globus ca cert, since it
will have expired by then.

--Ivan

> -----Original Message-----
> From: Charles Bacon [mailto:bacon at mcs.anl.gov] 
> Sent: Tuesday, December 09, 2003 10:48 AM
> To: judson at mcs.anl.gov
> Subject: Re: Globus CA question
> 
> 
> "Ivan R. Judson" <judson at mcs.anl.gov> writes:
> 
> > Hey Charles,
> >
> > According to your records when does the last Cert signed by 
> the Globus 
> > CA expire?
> 
> Probably a year from today, but that's not really relevant.  
> The relevant part is that the Globus CA certificate itself 
> will expire next month:
> 
> grid-cert-info -file /etc/grid-security/certificates/42864e48.0
> 
>         Validity
>             Not Before: Jan 23 19:20:24 1998 GMT
>             Not After : Jan 23 19:20:24 2004 GMT
> 
> Once the CA certificate expires, nobody will trust 
> certificates signed by the Globus CA, because the CA 
> certificate itself will be invalid.
> 
> 
> Charles
>