Skip to content

Update instructions to get hostcert from gridca.cern.ch #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
giffels wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update instructions to get hostcert from gridca.cern.ch #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions environ/vm-setup.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,16 +44,16 @@ CERN VMM virtual machine

A. Generate private key/certificate with the following command::

openssl req -new -subj "/CN=`hostname -f`" -out newcsr.csr -nodes -sha1
openssl req -new -subj "/CN=`hostname -f`" -out newcsr.csr -nodes -sha512 -newkey rsa:2048

B. Send the request to CERN CA: go to *New Host Certificate* on
https://ca.cern.ch web site and select host for which you request
https://gridca.cern.ch/gridca/ web site and select host for which you request
a certificate. Copy/Paste in the text box the content of file
newcsr.csr generated by OpenSSL and click Submit. Click Download
Certificate *Base 64 Encoded* and save the file in the same folder as
newcsr.csr. Then run the following set of commands::

sudo mv newcert.cer /etc/grid-security/hostcert.pem
sudo mv host.cert /etc/grid-security/hostcert.pem
sudo mv privkey.pem /etc/grid-security/hostkey.pem
sudo chmod 400 /etc/grid-security/hostkey.pem
sudo chown root:root /etc/grid-security/host{cert,key}.pem
Expand Down