2008/7/7 hawking.zn <[EMAIL PROTECTED]>: > > but when I configured my service to use GSI, it seems the user must provide > proxy certificate, if not, the bug will be like "can't find proxy > certificate".
Please include reasonably complete commands and error messages so we can help you better. > How can I config to use just short-lived end entity certificates ? AFAIK there's no difference between an EEC and a proxy. Just put the EEC where the proxy usually is or use standard techniques to specify the location of the EEC. You could set the X509_USER_PROXY environment variable, for instance. That's what I do. ASIDE TO GT DEVELOPERS: Where is the 4.2 documentation for specifying the location of the proxy credential? I just spent 15 mins looking for it and couldn't find it. Seems that should be up front where users can find it easily. Tom
