[Pgi-wg] MWSG Meeting Slides (Drafts) - OpenSSL and GSI areincompatible but use identical X509 proxies
m.riedel at fz-juelich.de
m.riedel at fz-juelich.de
Mon Mar 30 05:18:21 CDT 2009
Hi Etienne,
thanks for the research.
>- 1) OpenSSL and GSI are really incompatible as transport layers.
Confirmed, mainly because the do GSI/HTTP making it HTTPG basically...
>- 2) But they now accept exactly the same RFC compliant X509 proxies.
Good news - and helpful for GridFTP probably - so you may use openssl proxies with GridFTP, so GSI is not required anymore for GridFTP then...
>- 3) Old-style GSI X509 proxies are obsolete, and their usage should be
forbidden
That's clear.
>- I suggest that you provide information 2 and 3 at the beginning of the
first slide 'TLS with GSI Proxies'.
I will do it.
Thanks,
Morris
--------------------------------------------------------------------------------
Morris Riedel
SW - Engineer
Distributed Systems and Grid Computing Division
Central Institute of Applied Mathematics
Research Centre Juelich
Wilhelm-Johnen-Str. 1
D - 52425 Juelich
Germany
Email: m.riedel at fz-juelich.de
Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel
Phone: +49 2461 61 - 3651
Fax: +49 2461 61 - 6656
Skype: MorrisRiedel
'We work to improve ourselves and the rest of mankind.'
-------------------------------------------------------------------
-------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
Dr. Sebastian M. Schmidt
-------------------------------------------------------------------
-------------------------------------------------------------------
-------------- next part --------------
Morris,
Concerning the MWSG Meeting Slides :
About X509 proxies, I just got confirmation from Vincenzo CIASCHINI that :
1) OpenSSL and GSI are really incompatible as transport layers.
2) But they now accept exactly the same RFC compliant X509 proxies.
3) Old-style GSI X509 proxies are obsolete, and their usage should be
forbidden
I suggest that you provide information 2 and 3 at the beginning of the
first slide 'TLS with GSI Proxies'.
Best regards.
----------------------------------
Etienne URBAH IN2P3 - LAL
Bat 200 91898 ORSAY France
Tel: +33 1 64 46 84 87
Mob: +33 6 22 30 53 27
Skype: etienne.urbah
mailto:urbah at lal.in2p3.fr
----------------------------------
On Mon, 30 Mar 2009, m.riedel at fz-juelich.de wrote:
> Hi PGI team,
>
> I received some contributions already and setup a first draft for the slides I will present tomorrow!
>
> They are in GridForge - so please comment the whole day today:
>
> http://forge.gridforum.org/sf/docman/do/downloadDocument/projects.pgi-wg/docman.root.meeting_materials.2009_03_30_mwsg_pgi_talk/doc15589
>
>
> The discussions about attributes and constraints I will start just after the coffee break here. ;-)
>
> Best regards from Zuerich,
> Morris
>
>
>
>
>
> -------------------------------------------------------------------
> -------------------------------------------------------------------
> Forschungszentrum Juelich GmbH
> 52425 Juelich
>
> Sitz der Gesellschaft: Juelich
> Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
> Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
> Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
> Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
> Dr. Sebastian M. Schmidt
> -------------------------------------------------------------------
> -------------------------------------------------------------------
More information about the Pgi-wg
mailing list