Back to CERN AFS UI LCG Production Services

This page gives the instructions on how to update the CA certificates on the CERN AFS UI. As the certificates are kept in a separate directory from the UI itself, this will result in the update of the CA certificates both for the production and pre-production AFS UI.

Get them from the repository

mkdir /tmp/ca_update
cd /tmp/ca_update
wget -r -A rpm -nd -N http://glitesoft.cern.ch/LCG-CAs/current/RPMS.production

Make a back up copy of the old certificates directory

cd /afs/.cern.ch/project/gd/LCG-share2
mv  certificates_old  certificates_really_old
cp -r certificates certificates_old

Remove the certificates_save directory when you have finished.

rm -rf certificates_really_old

Unpack them locally and move them to AFS

  > cd /tmp
  > mkdir local-upgrade
  > cd local-upgrade
  > for n in *.rpm; do rpm2cpio $n > $n.cpio; done
  > for n in *.cpio; do echo $n >> ca.log; cpio -id --verbose --no-absolute-filenames < $n 2>&1 | tee -a ca.log; done
  > cd etc/grid-security
  > tar cpf - . | (cd /afs/.cern.ch/project/gd/LCG-share2/ ; tar xpf - )

edit the VERSION file afs/.cern.ch/project/gd/LCG-share2/certificates/VERSION and copy the header from the CA release html page.

-- Main.diana - 14 Feb 2007

Edit | Attach | Watch | Print version | History: r9 < r8 < r7 < r6 < r5 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r8 - 2007-11-21 - JuditNovak
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LCG All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback