https://redmine.dataone.org/https://redmine.dataone.org/favicon.ico2014-08-04T18:47:58ZDataONE TasksMember Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=204652014-08-04T18:47:58ZLaura Moyerslmoyers1@utk.edu
<ul><li><strong>Target version</strong> changed from <i>Deploy by end of Y5Q4</i> to <i>Deploy by end of Y1Q1</i></li></ul> Member Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=214212014-09-19T17:49:31ZChris Jonescjones@nceas.ucsb.edu
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>In Progress</i></li><li><strong>Assignee</strong> set to <i>Chris Jones</i></li></ul><p>We're having trouble successfully connecting to dataone-test.pop.umn.edu. Troubleshooting the server side ceertificates now.</p>
Member Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=214232014-09-19T17:57:05ZChris Jonescjones@nceas.ucsb.edu
<ul></ul><p>When connecting to dataone-test.pop.umn.edu over SSL, the connection outside of a browser fails:<br>
<br>
openssl s_client -connect dataone-test.pop.umn.edu:443 -CAfile addtrustexternalcaroot.crt</p>
<p>...</p>
<hr>
<p>Certificate chain<br>
0 s:/C=US/postalCode=55455/ST=MN/L=Minneapolis/street=100 Union Street SE/O=University of Minnesota/OU=College of Liberal Arts/CN=dataone-test.pop.umn.edu</p>
<a name="iCUSOInternet2OUInCommonCNInCommon-Server-CA"></a>
<h2 > i:/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA<a href="#iCUSOInternet2OUInCommonCNInCommon-Server-CA" class="wiki-anchor">¶</a></h2>
<p>...</p>
<p>Verify return code: 21 (unable to verify the first certificate)</p>
<p>Note that only one certificate is returned in the chain. This usually means that Apache SSL directives are not configured completely. The server needs to return both the server certificate, and the intermediate CA certificates that sign the server certificate up to, and potentially including, the root certificate.</p>
<p>Fabio needs to download the intermediate chain file from the InCommon CA provider, and install that in Apache, then restart Apache.</p>
Member Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=218452014-09-29T21:30:23ZLaura Moyerslmoyers1@utk.edu
<ul><li><strong>Target version</strong> changed from <i>Deploy by end of Y1Q1</i> to <i>Deploy by end of NCTE</i></li></ul> Member Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=232292015-01-02T16:42:24ZLaura Moyerslmoyers1@utk.edu
<ul><li><strong>Target version</strong> changed from <i>Deploy by end of NCTE</i> to <i>Operational</i></li></ul> Member Nodes - Task #5927: MPC: Verify successful installation of server side certificatehttps://redmine.dataone.org/issues/5927?journal_id=244242015-01-28T15:25:07ZLaura Moyerslmoyers1@utk.edu
<ul><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li><li><strong>translation missing: en.field_remaining_hours</strong> set to <i>0</i></li><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Closed</i></li></ul>