New certificate for globus fails

LabKey Support Forum (Inactive)
New certificate for globus fails Brian Connolly  2011-09-29 16:14
Status: Closed
 
Ashoka,

You will want to compare the chunk of text between the BEGIN CERTIFICATE and END CERTIFICATE lines in your previous email message against the contents of the hostcert.pem and the containercert.pem files. A simple diff should tell you if they are the same.

If these are the same, another possibility is that private key does not match the certificate. For both the hostcert and containercert verify that the associated private key (ie hostkey.pem) is correct, follow the instructions in the section "Verify A Certificate Matches A Private Key " at http://security.ncsa.illinois.edu/research/grid-howtos/usefulopenssl.html

If private keys and certificates are correct, then I would like you follow the instructions in the "Test the WS-GRAM installation" section on https://www.labkey.org/wiki/home/Documentation/page.view?name=globusServer for instructions on testing your implementation. This may help us isolate where in the globus server the problem exists.

-Brian