This page gives the instructions on how to update the CA certificates on the CERN AFS UI. As the certificates are kept in a separate directory from the UI itself, this will result in the update of the CA certificates both for the production and pre-production AFS UI.

Get them from the repository

mkdir /tmp/ca_update
cd /tmp/ca_update
wget -r -A rpm -nd -N http://glitesoft.cern.ch/LCG-CAs/current/RPMS.production

Make a back up copy of the old certificates directory

cd /afs/.cern.ch/project/gd/LCG-share2
mv  certificates_old  certificates_really_old
cp -r certificates certificates_old

Remove the certificates_save directory when you have finished.

rm -rf certificates_really_old

Unpack them locally and move them to AFS

  > cd /tmp/ca_update
  > for n in *.rpm; do rpm2cpio $n > $n.cpio; done
  > for n in *.cpio; do echo $n >> ca.log; cpio -id --verbose --no-absolute-filenames < $n 2>&1 | tee -a ca.log; done
  > cd etc/grid-security
  > tar cpf - . | (cd /afs/.cern.ch/project/gd/LCG-share2/ ; tar xpf - )

edit the VERSION file /afs/.cern.ch/project/gd/LCG-share2/certificates/VERSION and copy the header from the CA release html page.

Syncronize the RO and RW AFS areas.

afs_admin vos_release p.gd.lcgshare

-- Main.diana - 14 Feb 2007