Project

General

Profile

Task #3996

MNDeployment #3232: LTER-EUROPE

Generate urn:node:LTER_EUROPE client certificate

Added by Ben Leinfelder almost 11 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
2013-09-24
Due date:
% Done:

100%

Estimated time:
0.00 h
Story Points:
Sprint:

Description

For use on the production machine. See parent task for admin contact who should have access to the client certificate bundle.

History

#1 Updated by Chris Jones almost 11 years ago

  • Assignee changed from Chris Jones to Dave Vieglais

Assigning to Dave for the production cert.

#2 Updated by Ben Leinfelder almost 11 years ago

  • Subject changed from Generate ILTER-EUROPE client certificate to Generate urn:node:LTER-EUROPE client certificate

#3 Updated by Dave Vieglais almost 11 years ago

  • Status changed from New to In Progress

#4 Updated by Dave Vieglais almost 11 years ago

  • translation missing: en.field_remaining_hours set to 0.0
  • Status changed from In Progress to Closed

Done. Available at /lter-europe/lter-europe-certs-prod.tgz

Access provided to account "blankman"

#5 Updated by Bruce Wilson over 10 years ago

  • Target version changed from Deploy by end of Y5Q2 to Deploy by end of Y5Q3

#6 Updated by Ben Leinfelder over 10 years ago

  • Estimated time set to 0.00

#7 Updated by Ben Leinfelder over 10 years ago

  • Status changed from Closed to In Progress
  • Subject changed from Generate urn:node:LTER-EUROPE client certificate to Generate urn:node:LTER_EUROPE client certificate

Turns out dashes are not allowed in our NodeIds:
http://mule1.dataone.org/ArchitectureDocs-current/design/NodeIdentity.html
And so the original certificate needs to be revoked and a new one generated with a NodeId that uses an underscore (_) rather than a dash (-).

#8 Updated by Matthew Jones over 10 years ago

Regenerated the node certificate using the new node ID urn:node:ILTER_EUROPE

Uploaded the certs to the web for download by ILTER personnel. Still need to revoke old certificates.

#9 Updated by Matthew Jones over 10 years ago

  • Status changed from In Progress to Closed
  • Assignee changed from Dave Vieglais to Matthew Jones

Revoked the original certificate that used a dash in the name, and distributed CRL lists to CNs.

#10 Updated by Laura Moyers about 10 years ago

  • Target version changed from Deploy by end of Y5Q3 to Deploy by end of Y5Q4

#11 Updated by Bruce Wilson about 10 years ago

  • % Done changed from 0 to 100

#12 Updated by Laura Moyers about 10 years ago

  • Target version changed from Deploy by end of Y5Q4 to Operational

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)