[AG-TECH] Re: certificate issues

[Matthew Martinez]

> Check the clocks on your computers, and the good-from date on your certs:
>
> error:80066420:lib(128):verify_callback:remote certificate not yet
> valid
>
> --bob
>
> At 08:31 AM 6/17/2004, Matthew Martinez wrote:
>> >>what if i'm in linux and still encountering the same error???
>>
>> >Hm. Can you send along your venuclient.log logfile?
>>
>>here ya go bob.
>>
>>(sorry, i didn't realize that the actual AG program was on a windows
>>machine, since i had made the certs in Linux, mebbe you were right the
>>first time)
>>
>>C:\Program Files\Access Grid Toolkit\bin>VenueClient.py -d
>>06/17/04 08:18:04 DEBUG Creating thread 0
>>06/17/04 08:18:04 DEBUG Starting thread 0
>>06/17/04 08:18:04 DEBUG Worker 0 starting
>>06/17/04 08:18:04 DEBUG Waiting thread 0
>>06/17/04 08:18:04 DEBUG Done creating workers
>>06/17/04 08:18:04 DEBUG Reading persisted data from: C:\Documents and
>>Settings\A
>>dministrator\Application Data\AccessGrid\personalDataStore\DataStore.dat
>>C:\PROGRA~1\ACCESS~2\bin\agpm.py:57: RuntimeWarning: tmpnam is a
>> potential
>>secur
>>ity risk to your program
>>   workingDir = os.path.join(GetTempDir(), os.path.basename(os.tmpnam()))
>>C:\PROGRA~1\ACCESS~2\bin\agpm.py:57: RuntimeWarning: tmpnam is a
>> potential
>>secur
>>ity risk to your program
>>   workingDir = os.path.join(GetTempDir(), os.path.basename(os.tmpnam()))
>>06/17/04 08:18:06 DEBUG userConfigDir: C:\Documents and
>>Settings\Administrator\A
>>pplication Data\AccessGrid
>>06/17/04 08:18:06 DEBUG Opened repository C:\Documents and
>>Settings\Administrato
>>r\Application Data\AccessGrid\certRepo
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\42864e48.0
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\42864e48.signing_policy
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\45cc9e80.0
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\45cc9e80.signing_policy
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\185ecd7c.0
>>06/17/04 08:18:06 DEBUG Unlink C:\Documents and
>>Settings\Administrator\Applicati
>>on Data\AccessGrid\trustedCACerts\185ecd7c.signing_policy
>>06/17/04 08:18:06 DEBUG Using default identity
>>/C=US/ST=Texas/O=UTHSCSA/OU=Radio
>>logy/CN=John Smith/Email=matthew at biochem.uthscsa.edu
>>06/17/04 08:18:06 DEBUG Initializing environment with proxy cert for
>>/C=US/ST=Te
>>xas/O=UTHSCSA/OU=Radiology/CN=John
>> Smith/Email=matthew at biochem.uthscsa.edu
>>Your identity: /C=US/ST=Texas/O=UTHSCSA/OU=Radiology/CN=John
>>Smith/Email=matthew
>>@biochem.uthscsa.edu
>>user_key loaded
>>user_proxy cert_chain
>>verify failed
>>Error:
>>-->
>>error:80066420:lib(128):verify_callback:remote certificate not yet
>>valid:\softwa
>>re\AccessGrid\WinGlobus\source\gsi\ssl_utils\library\sslutils.c:2135
>>Got error verify_callback
>>-->
>>error:80066412:lib(128):verify_callback:certificate::\software\AccessGrid\WinGlo
>>bus\source\gsi\ssl_utils\library\sslutils.c:2706
>>         subject=/C=US/ST=Texas/O=UTHSCSA/OU=Radiology/CN=John
>>Smith/Email=matthe
>>w at biochem.uthscsa.edu
>>         issuer =/C=US/ST=Texas/L=San
>>Antonio/O=UTHSCSA/OU=Biochemistry/CN=bioche
>>m.uthscsa.edu/Email=matthew at biochem.uthscsa.edu
>

what if they all match up?
(by the by, got a Linux box with AG installed on it now, but i get an
Authorization Failure error. It does tell me to check the clocks, but
since the clocks match up on this box too, i don't understand what's going
on)