[Pgi-wg] MWSG Meeting Slides (Drafts) - OpenSSL and GSI areincompatible but use identical X509 proxies

[m.riedel at fz-juelich.de]

Hi Etienne,

  thanks for the research.

>- 1) OpenSSL and GSI are really incompatible as transport layers.

Confirmed, mainly because the do GSI/HTTP making it HTTPG basically...

>- 2) But they now accept exactly the same RFC compliant X509 proxies.

Good news - and helpful for GridFTP probably - so you may use openssl proxies with GridFTP, so GSI is not required anymore for GridFTP then...

>- 3) Old-style GSI X509 proxies are obsolete, and their usage should be 
forbidden

That's clear.


>- I suggest that you provide information 2 and 3 at the beginning of the 
first slide 'TLS with GSI Proxies'.

I will do it.

Thanks,
Morris


--------------------------------------------------------------------------------
Morris Riedel
SW - Engineer
Distributed Systems and Grid Computing Division
Central Institute of Applied Mathematics
Research Centre Juelich
Wilhelm-Johnen-Str. 1
D - 52425 Juelich
Germany

Email:  m.riedel at fz-juelich.de
Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel

Phone: +49 2461 61 - 3651
Fax: +49 2461 61 - 6656

Skype: MorrisRiedel

'We work to improve ourselves and the rest of mankind.'



-------------------------------------------------------------------
-------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich

Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
Dr. Sebastian M. Schmidt
-------------------------------------------------------------------
-------------------------------------------------------------------
-------------- next part --------------
Morris,

Concerning the MWSG Meeting Slides :

About X509 proxies, I just got confirmation from Vincenzo CIASCHINI that :

1) OpenSSL and GSI are really incompatible as transport layers.

2) But they now accept exactly the same RFC compliant X509 proxies.

3) Old-style GSI X509 proxies are obsolete, and their usage should be 
forbidden

I suggest that you provide information 2 and 3 at the beginning of the 
first slide 'TLS with GSI Proxies'.

Best regards.

----------------------------------
Etienne URBAH          IN2P3 - LAL
Bat 200     91898 ORSAY     France
Tel: +33 1 64 46 84 87
Mob: +33 6 22 30 53 27
Skype: etienne.urbah
mailto:urbah at lal.in2p3.fr
----------------------------------


On Mon, 30 Mar 2009, m.riedel at fz-juelich.de wrote:
> Hi PGI team,
> 
>   I received some contributions already and setup a first draft for the slides I will present tomorrow!
> 
> They are in GridForge - so please comment the whole day today:
> 
> http://forge.gridforum.org/sf/docman/do/downloadDocument/projects.pgi-wg/docman.root.meeting_materials.2009_03_30_mwsg_pgi_talk/doc15589
> 
> 
> The discussions about attributes and constraints I will start just after the coffee break here. ;-)
> 
> Best regards from Zuerich,
> Morris
> 
>   
> 
> 
> 
> -------------------------------------------------------------------
> -------------------------------------------------------------------
> Forschungszentrum Juelich GmbH
> 52425 Juelich
> 
> Sitz der Gesellschaft: Juelich
> Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
> Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
> Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
> Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
> Dr. Sebastian M. Schmidt
> -------------------------------------------------------------------
> -------------------------------------------------------------------