Back to CERN AFS UI LCG Production Services
This page gives the instructions on how to update the CA certificates on the CERN AFS UI. As the certificates are kept in a separate directory from the UI
itself, this will result in the update of the CA certificates both for the production and pre-production AFS UI.
Get them from the repository
mkdir /tmp/ca_update
cd /tmp/ca_update
wget -r -A rpm -nd -N http://glitesoft.cern.ch/LCG-CAs/current/RPMS.production
Make a back up copy of the old certificates directory
cd /afs/.cern.ch/project/gd/LCG-share2
mv certificates_old certificates_really_old
cp -r certificates certificates_old
Remove the
certificates_save
directory when you have finished.
rm -rf certificates_really_old
Unpack them locally and move them to AFS
> cd /tmp/ca_update
> for n in *.rpm; do rpm2cpio $n > $n.cpio; done
> for n in *.cpio; do echo $n >> ca.log; cpio -id --verbose --no-absolute-filenames < $n 2>&1 | tee -a ca.log; done
> cd etc/grid-security
> tar cpf - . | (cd /afs/.cern.ch/project/gd/LCG-share2/ ; tar xpf - )
edit the VERSION file
/afs/.cern.ch/project/gd/LCG-share2/certificates/VERSION
and copy the header from the CA release html page.
Syncronize the RO and RW AFS areas.
afs_admin vos_release p.gd.lcgshare
-- Main.diana - 14 Feb 2007