The output indicates a problem with your host credentials (hostcert.pem,
hostkey.pem). How did you create them? Did you use the gt-server-ca.pl
script from the quickstart? What is in your hostcert.pem file? How is
the openssl command "not working"? What is the error? What is in your
ca_certificate file?

Note: DO NOT send your hostkey.pem file. You must keep that private.

CIJO YOHANNAN wrote:
> Can anybody help with error.
> 
> 
> -------------------------------------------------------------------------------------------------
> # myproxy-server-setup
> Problem with host credentials:
> 
> User Cert File: /etc/grid-security/hostcert.pem
> User Key File: /etc/grid-security/hostkey.pem
> 
> Trusted CA Cert Dir: /etc/grid-security/certificates
> 
> Output File: /tmp/q312yaUy4Y/p
> Your identity:
> /O=Grid/OU=GlobusTest/OU=simpleCA**********/CN=host/*************
> Creating proxy ......................
> ..
> 
> ERROR: Couldn't verify the authenticity of the user's credential to generate
> a proxy from.
>        grid_proxy_init.c:1013: globus_credential: Error verifying
> credential: Failed to verify credential
> globus_gsi_callback_module: Could not verify credential
> globus_gsi_callback_module: Could not verify credential: certificate
> signature failure
> OpenSSL Error: a_verify.c:168: in library: asn1 encoding routines, function
> ASN1_item_verify: EVP lib
> OpenSSL Error: rsa_eay.c:708: in library: rsa routines, function
> RSA_EAY_PUBLIC_DECRYPT: padding check failed
> OpenSSL Error: rsa_pk1.c:100: in library: rsa routines, function
> RSA_padding_check_PKCS1_type_1: block type is not 01
>  Done
> 
> --------------------------------------------------------------------------------------------------------
> Even this command is not working
> GLOBUS_LOCATION/bin/openssl x509 -hash -noout < ca_certificate
> 

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to