total 32 -rw-r--r--. 1 root root 1436 2007-12-18 02:09 1c3f2ca8.0 -rw-r--r--. 1 root root 2276 2004-05-06 14:51 1c3f2ca8.signing_policy -rw-r--r--. 1 root root 912 2007-05-02 18:03 45cc9e80.0 -rw-r--r--. 1 root root 1334 2004-03-25 09:25 45cc9e80.signing_policy -rw-r--r--. 1 root root 1448 2004-04-19 18:00 d1b603c3.0 -rw-r--r--. 1 root root 2263 2004-03-25 09:25 d1b603c3.signing_policy -rw-r--r--. 1 root root 1334 2004-09-06 01:26 f18fa857.0 -rw-r--r--. 1 root root 571 2004-09-06 01:26 f18fa857.signing_policy
Interesting, Certificate Managers not seeing one? This was from a fresh installation on Fedora 12 using Jason's Install Guide and your packages. I've exported my certificates. I'm going to try rebuilding. Mike -----Original Message----- From: Christoph Willing [mailto:[email protected]] Sent: Tuesday, January 26, 2010 3:17 PM To: [email protected] Cc: [email protected] Subject: Re: [AG-TECH] Venue Server question On 27/01/2010, at 5:40 AM, Mike Weaver wrote: > I'm trying to set up & experiment with the AG 3 Venue Server. Got my > service certificate approved & installed and the Venue Server started > successfully, but can't connect with the Venue Manager. The > relevant part > of the VenueServer.log file looks like this: > > 01/26/10 14:26:52 -1260389520 Hosting ServiceContainer.py:187 > ERROR None > Traceback (most recent call last): > File "/usr/lib/python2.6/site-packages/M2Crypto/SSL/SSLServer.py", > line > 33, in handle_request > request, client_address = self.get_request() > File "/usr/lib/python2.6/SocketServer.py", line 444, in get_request > return self.socket.accept() > File > "/usr/lib/python2.6/site-packages/AccessGrid3/AccessGrid/hosting/ZSI/ > Service > Container.py", line 156, in M2CryptoConnectionAccept > ret = ssl.accept_ssl() > File "/usr/lib/python2.6/site-packages/M2Crypto/SSL/Connection.py", > line > 152, in accept_ssl > return m2.ssl_accept(self.ssl, self._timeout) > SSLError: tlsv1 alert unknown ca > > Seems to say that the CA for my certificate is unknown. Running the > Certificate Manager shows 3 trusted CAs - "DOEGrids CA 1", "ESnet > Root CA 1" > & "Anonymous Certificate Authority" (issued by ANL Futures lab). The > service certificate was issued by the "Access Grid Developers CA". > Did I > miss a step or do something wrong? Mike, There should be four CA's so one of them is either missing or expired. Could you send a long listing (ls -l) of /etc/AccessGrid3/Config/ CAcertificates please? chris Christoph Willing +61 7 3365 8316 QCIF Access Grid Manager University of Queensland
