Fwd: [Globus] Globus CA going away January 2004

[Robert Olson]

>X-Mailer: 21.4 (patch 11) "Native Windows TTY Support (Windows)" XEmacs 
>Lucid (via feedmail 10 I);
>         VM 7.07 under 21.4 (patch 11) "Native Windows TTY Support 
> (Windows)" XEmacs Lucid
>From: "Von Welch" <welch at mcs.anl.gov>
>Date: Mon, 16 Jun 2003 09:58:19 -0500
>To: announce at globus.org
>Subject: [Globus] Globus CA going away January 2004
>CC: security at globus.org
>X-Spam-Status: No, hits=0.0 required=5.0 tests= version=2.21
>X-Spam-Level:
>Sender: owner-announce at globus.org
>X-Whitelist-by-bob: yes
>
>
>Globus Toolkit users:
>
>  On January 23, 2004, the current Globus Certificate Authority (CA)
>certificate will expire and the CA will be shut down. At that time,
>all certificates issued by the Globus CA will cease to function.  This
>includes any certificates issued by the Globus CA via email from
>ca at globus.org, including user certs, host certs, and service certs.
>If you're not sure whether this affects a certificate you have, see
>note [1] below. To prepare for this cutoff, the current Globus CA will
>issue no new certificates after September 1st and
>renewals/re-issuances will cease on October 1st.
>
>  This note is intended to give you warning of this event, and to
>advise you on alternative methods for acquiring certificates.  If you
>currently use Globus CA certificates, you may want to start
>investigating these alternatives now in preparation for the Globus CA
>shutdown.
>
>  First, many projects and organizations have set up their own
>production-quality CAs for Grid work - for example, DOE, EDG, PACI. If
>you are part of a project that has such a CA, we recommend you acquire
>new certificates from the project CA.
>
>  Second, you can setup and run your own CA. We make the SimpleCA
>software available to help with this, though any CA software should
>work. SimpleCA is available at:
>http://www.globus.org/security/simple-ca.html
>
>  Third, we will be establishing a simple, web-base certificate
>services which we plan to make publically available in August. This
>service will be primarily intended to support users who do not have
>other alternatives. Due to it's very nature it will not be a very
>trustworthy service and we only recommend it as a solution for those
>who cannot use one previous options.
>
>  If you have any questions, the mail list security at globus.org is
>probably the proper place to ask.
>
>Regards,
>
>The Globus Project team.
>--
>
>[1] If you are uncertain if a certificate was issued by the Globus CA,
>run the grid-cert-info command as follows on the certificate file. If
>the certificate was issued by the Globus CA, the output will be
>"/C=US/O=Globus/CN=Globus Certificate Authority".
>
>% grid-cert-info -issuer -file ~/.globus/usercert.pem
>/C=US/O=Globus/CN=Globus Certification Authority
>
>The above certificate was issued by the Globus CA.