FW: [AG-TECH] passphrase fails

Thomas D. Uram turam at mcs.anl.gov
Wed Apr 20 09:44:50 CDT 2005


Steve:

I'm glad that the problem is resolved.

I just want to make one clarification, for the sake of AG users in general: 
Reinstallation of the toolkit was not responsible for fixing the problem.

Certificates, be they identity certificates or CA certificates, are part of user state 
that resides in the AccessGrid directory (as specified below on Windows, ~/.AccessGrid 
otherwise).  The problem, in this case, was solved by the removal and recreation of that 
user state.  This is a problem that we've seen before, and are planning to resolve in the 
current development cycle.

Tom

Steve Williams wrote:
> Thanks Thomas
> 
> Deleting:
> 
> 
>>C:\Documents and
> 
> Settings\<you>\Application\Data\AccessGrid\Config\certRepo
> 
> didn't change anything, even with a new anonymous cert - but deleting
> the whole tree from AccessGrid down and re-installing the toolkit did.
> 
> Previous re-installation had no effect so I assume that that tree, as
> part of the user data, stays put during uninstall/install.
> 
> Sounds like you were right about something strange in there somewhere.
> 
> Managed to install my personal cert which I'd previously saved as well -
> so even better.
> 
> Thanks to all for your help.
> 
> Cheers
> 
> Steve
> 
> 
> 
>>-----Original Message-----
>>From: Thomas D. Uram [mailto:turam at mcs.anl.gov]
>>Sent: 19 April 2005 18:36
>>To: Steve Williams
>>Cc: ag-tech at mcs.anl.gov
>>Subject: Re: FW: [AG-TECH] passphrase fails
>>
>>Steve:
>>
>>You should have certificates listed in the TrustedCACerts tab of the
> 
> cert
> 
>>manager.  I
>>suspect there is bad state in your certificate repository.  I'd
> 
> recommend
> 
>>you do the
>>following:
>>
>>- Exit any running AG software
>>- Delete the following directory:
>>C:\Documents and Settings\<you>\Application
>>Data\AccessGrid\Config\certRepo
>>- Start the Certificate Manager
>>- From the requests tab, request a certificate (you could request an
>>anonymous cert, which
>>will be immediately issued and available)
>>- When the cert is ready, import it, and proceed as normal
>>
>>At the end of this, you should have multiple certificates listed on
> 
> the
> 
>>TrustedCACerts tab
>>(Access Grid Developers CA, DOEGrids CA, ESnet Root CA, Anonymous).
> 
> If
> 
>>you don't, or if
>>there is some other failure, let me know.
>>
>>Tom Uram
>>
>>
>>
>>Steve Williams wrote:
>>
>>>Thanks for those responses:
>>>
>>>Nope, the cert has not expired, it is brand new and the dates on it
> 
> are
> 
>>>correct - I even got another one to check that it wasn't just the
> 
> cert
> 
>>>and that I hadn't made a typo in the passphrase.
>>>
>>>This is a new install for me - it seems, though I may be wrong, that
> 
> the
> 
>>>main problem is that I should have something in the Trusted CA tab
> 
> of
> 
>>>the cert manager - I have nothing.
>>>
>>>Does that spark any lights?
>>>
>>>Cheers
>>>
>>>Steve
>>>
>>>
> 
> 
> 




More information about the ag-tech mailing list