User Tools

Site Tools


hpc:othernotes

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
hpc:othernotes [2015/01/15 19:28]
jchilders
hpc:othernotes [2015/01/15 19:31] (current)
jchilders
Line 13: Line 13:
 </code> </code>
  
 +=== Removing a password ===
 In the case of a Robotic Certificate, a password on the key will stop programs which use it so the password must be removed. Just use: In the case of a Robotic Certificate, a password on the key will stop programs which use it so the password must be removed. Just use:
 <code bash> <code bash>
-openssl x509 -in password-keyfile.pem -out passwordless-keyfile.pem+openssl rsa -in password-keyfile.pem -out passwordless-keyfile.pem
 </code> </code>
-It will ask for the password on the old file, and you can skip entering one for the new file. You may also need to change ''x509'' to ''rsa'' or whichever protocol is being used.+It will ask for the password on the old file, and you can skip entering one for the new file. 
  
 +  * ''openssl x509'' is for pem-formatted certificates
 +  * ''openssl rsa'' is for key files
 +
 +=== Updating certificates CA directory ===
 I've typically had to update the local copy of our CA certificate folder by grabbing the one at CERN: I've typically had to update the local copy of our CA certificate folder by grabbing the one at CERN:
 ''lxplus.cern.ch:/etc/grid-security/certificates'' ''lxplus.cern.ch:/etc/grid-security/certificates''
 and copying it locally. Otherwise you get errors from ''voms-proxy-init''. and copying it locally. Otherwise you get errors from ''voms-proxy-init''.
  
 +=== Testing Success ===
 To test the robotic key/cert you can do the following: To test the robotic key/cert you can do the following:
 <code bash> <code bash>
hpc/othernotes.1421350086.txt.gz ยท Last modified: 2015/01/15 19:28 by jchilders