ATC: ATLAS Center at ANL

• Athena Event Displays

If given an encoded tarball use the following command

openssl aes-256-cbc -d -in filename.tgz.enc | tar zxf -

In the case of a Robotic Certificate, a password on the key will stop programs which use it so the password must be removed. Just use:

openssl rsa -in password-keyfile.pem -out passwordless-keyfile.pem

It will ask for the password on the old file, and you can skip entering one for the new file.

• openssl x509 is for pem-formatted certificates
• openssl rsa is for key files

I've typically had to update the local copy of our CA certificate folder by grabbing the one at CERN: lxplus.cern.ch:/etc/grid-security/certificates and copying it locally. Otherwise you get errors from voms-proxy-init.

To test the robotic key/cert you can do the following:

voms-proxy-init --cert </path/to/cert.pem> --key </path/to/key.pem> --certdir </path/to/certificates> -verify