On Tue, Aug 12, 2008 at 4:37 PM, Joseph Bester <[EMAIL PROTECTED]> wrote: > On Aug 12, 2008, at 8:06 AM, I8abyte wrote: >> >> My root CA has a pathlen of "3" and my second-level CA has a pathlen >> "2". My personal cert does not have a pathlen set and never has any >> of my proxy certs displayed one. >> >> BTW, thanks for your help so far! > > I've tried creating a CA with pathlen constraint and generated proxies > beyond that level without problems (with a few different openssl versions). > Note that the callback code is a bit openssl version-dependent and must be > compiled and run against the same openssl version. > > I'd be interested in seeing the output from setting the environment variable > GLOBUS_GSI_CALLBACK_DEBUG_LEVEL to 3 in the app which is failing. > > Joe >
Joe-- Another question: what platform are you running on? The system I'm having trouble with is a RHEL4u4 ia64 system with Jrockit Java 1.5. My local Openssl is 0.9.7a (the toolkit install doc just specifies 0.9.7+ so I presume that's OK). I'll check through my config.log too.
