User:Torben Rasmussen (NSC)/SweGrid old/Grid certificates - Revision history

Torben Rasmussen (NSC): moved SweGrid old/Grid certificates to User:Torben Rasmussen (NSC)/SweGrid old/Grid certificates

2011-07-08T14:28:18Z

moved SweGrid old/Grid certificates to User:Torben Rasmussen (NSC)/SweGrid old/Grid certificates

Torben Rasmussen (NSC) at 13:37, 5 July 2011

2011-07-05T13:37:29Z

Torben Rasmussen (NSC): moved SweGrid/Grid certificates to SweGrid old/Grid certificates: Old version of SweGrid docs

2011-07-05T09:17:28Z

moved SweGrid/Grid certificates to SweGrid old/Grid certificates: Old version of SweGrid docs

Torben Rasmussen (NSC) at 13:12, 17 June 2011

2011-06-17T13:12:31Z

Jonas Lindemann (LUNARC): /* Creating a proxy certificate */

2011-06-16T21:11:34Z

‎Creating a proxy certificate

Torben Rasmussen (NSC): moved Grid certificates to SweGrid/Grid certificates

2011-06-16T14:20:28Z

moved Grid certificates to SweGrid/Grid certificates

Jens Larsson (NSC) at 13:09, 4 May 2011

2011-05-04T13:09:43Z

Jens Larsson (NSC): /* Proxy certificates */

2011-05-04T13:05:36Z

‎Proxy certificates

Jens Larsson (NSC): /* Proxy certificates */

2011-05-04T13:03:10Z

‎Proxy certificates

Jens Larsson (NSC): /* Introduction to certificates */

2011-05-04T09:02:35Z

‎Introduction to certificates

← Older revision		Revision as of 13:37, 5 July 2011
Line 1:		Line 1:
−	~~[[Category:Grid]]~~
	A certificate is the equivalent of a passport in real-life. In the same way you have prove your credentials when you aquire a passport the same is true for a certificate. A Certificate Authority (CA) has to vouch for your identity and sign your certificate.		A certificate is the equivalent of a passport in real-life. In the same way you have prove your credentials when you aquire a passport the same is true for a certificate. A Certificate Authority (CA) has to vouch for your identity and sign your certificate.

← Older revision		Revision as of 13:12, 17 June 2011
Line 1:		Line 1:
		+	[[Category:Grid]]
	A certificate is the equivalent of a passport in real-life. In the same way you have prove your credentials when you aquire a passport the same is true for a certificate. A Certificate Authority (CA) has to vouch for your identity and sign your certificate.		A certificate is the equivalent of a passport in real-life. In the same way you have prove your credentials when you aquire a passport the same is true for a certificate. A Certificate Authority (CA) has to vouch for your identity and sign your certificate.

@@ Line 243: / Line 243: @@
   Your proxy is valid until: 2011-03-11 15:03:19
-'''NOTE:''' When using ARC 0.8.x a GSI proxy is required. To generate a GSI proxy, the '''--old''' or '''-O''' switches can be used:
+  $ arcproxy
   Your identity: /O=Grid/O=NorduGrid/OU=lunarc.lu.se/CN=Jonas Lindemann
   Enter pass phrase for /home/jonas/.globus/userkey.pem:

@@ Line 11: / Line 11: @@
 [http://www.nordugrid.org/documents/certificate_howto.html http://www.nordugrid.org/documents/certificate_howto.html]
-= Requesting a certificate using the Terena eScience Portal =
+= Requesting a certificate =
 The Terena eScience Portal is a joint effort to provide users with a tool for requesting grid-certificate with the credentials from their home-institution or university.
@@ Line 38: / Line 39: @@
 . Install the signed certificate in your browser by clicking on the "Install in keystore" link. This will install the certificate in the key-store of your browser.
-== Exporting Terena certificate for use with Grid tools ==
+=== Exporting Terena certificate for use with Grid tools ===
 To use the Terena certificates with the ARC grid client they have to be exported from the browser and converted into a suitable format. To export and convert a certificate installed the following procedure can be used:
@@ Line 92: / Line 93: @@
   chmod 400 userkey.pem
-= Requesting a certificate with ARC tools =
+== Requesting a certificate with ARC tools ==
 The first step in aquiring a certificate is to create a certificate request. This is done using the '''grid-cert-request -int''' command. (The -int options means interactive usage). When issued, the tool will generate a certificate request and a private key. The tool will also ask for a password to protect the private key. Note, if the password is lost a new certificate must be obtained. The process is shown below:
@@ Line 163: / Line 164: @@
 [http://ca.nordugrid.org/ra.html [http://ca.nordugrid.org/ra.html http://ca.nordugrid.org/ra.html]]
-== Installing certificate ==
+=== Installing the grid certificate in your browser ===
 When the signed certificate is received from the CA it has to be added to the '''usercert.pem''' file in the '''.globus''' directory.
@@ Line 174: / Line 175: @@
 Copy the part shown above into the file <tt>usercert.pem</tt> in the <tt>.globus</tt> directory in your home directory.
-= Requesting a certificate using openssl =
+== Requesting a certificate using openssl ==
 If neither the Terena Portal or the ARC tools are available you can use openssl directly to create a certificate request and a private key. Openssl will also ask for a password to protect the private key. Note, if the password is lost a new certificate must be obtained. The process is shown below:
@@ Line 192: / Line 193: @@
 [http://ca.nordugrid.org/ra.html http://ca.nordugrid.org/ra.html]
-== Installing certificate ==
+=== Installing the grid certificate in your browser ===
 When the signed certificate is received from the CA it has to be put into the '''usercert.pem''' file in the '''.globus''' directory.

@@ Line 217: / Line 217: @@
 Authentication on the grid is done by using special shortlived proxy certificates, which delegate authentication to specific resources. There are serveral tools available for creating, checking and destroying these proxy certificates.
+== ARC 1.0.x ==
-== Creating a proxy certificate ==
+=== Creating a proxy certificate ===
 To create a shortlived proxy that can be used for authentication with grid services, the '''arcproxy''' command can be used. A 12 hour (default) proxy is created in the following example::
@@ Line 252: / Line 252: @@
   Your proxy is valid until: 2011-03-11 03:15:04
-== Checking proxy lifetime ==
+=== Checking proxy lifetime ===
 The remaining lifetime of a proxy-certificate can be queried using the '''arcproxy''' command using the '''--info''' switch.
@@ Line 274: / Line 274: @@
   Proxy type: Legacy Globus impersonation proxy
-== Destroying a proxy certificate ==
+=== Destroying a proxy certificate ===
 A proxy can be destroyed with the '''-r''' or '''--remove''' switches.
@@ Line 284: / Line 284: @@
   $ arcproxy --remove
-== Creating a proxy certificate (ARC 0.8.x) ==
+== ARC 0.8.x ==
 To create a shortlived proxy that can be used for authentication with grid services, the '''grid-proxy-init''' command can be used. A 12 hour (default) proxy is created in the following example::
@@ Line 304: / Line 305: @@
   Your proxy is valid until: Thu Feb 10 18:48:34 2011
-== Checking proxy lifetime (ARC 0.8.x) ==
+=== Checking proxy lifetime ===
 The remaining lifetime of a proxy-certificate can be queried using the '''grid-proxy-info''' command:
@@ Line 330: / Line 331: @@
 Which shows that the proxy certificate is valid for 11 hours 59 minutes.
-== Destroying a proxy certificate (ARC 0.8.x) ==
+=== Destroying a proxy certificate ===
 A proxy certificate can be destroyed using the '''grid-proxy-destroy''' command. This command will essentially just delete the temporary proxy file created with '''grid-proxy-init'''

← Older revision	Revision as of 14:28, 8 July 2011
(No difference)

← Older revision	Revision as of 09:17, 5 July 2011
(No difference)

← Older revision	Revision as of 14:20, 16 June 2011
(No difference)

@@ Line 1: / Line 1: @@
 A certificate is the equivalent of a passport in real-life. In the same way you have prove your credentials when you aquire a passport the same is true for a certificate. A Certificate Authority (CA) has to vouch for your identity and sign your certificate.
@@ Line 6: / Line 4: @@
 For more information regarding certificates and public key cryptography:
 [http://en.wikipedia.org/wiki/Public-key_cryptography http://en.wikipedia.org/wiki/Public-key_cryptography]
 [http://en.wikipedia.org/wiki/Public_key_certificate http://en.wikipedia.org/wiki/Public_key_certificate]
 = Requesting a certificate using the Terena eScience Portal =