Project

General

Profile

Feature #12061

gwms should have a CRL check

Added by Mats Rynge over 4 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
03/24/2016
Due date:
% Done:

0%

Estimated time:
Stakeholders:
Duration:

Description

We have recently added a CRL check to the OSG VO glideins as we had a few sites where the glidein started up, but due to expired CRLs, the glidein was not able to connect back to the frontend collector. Having talked to the factory ops team and Brian B., it sounds like a CRL check during validation is going to provide a more clear error for the factory ops team. It was suggested that the gwms have a built in check to benefit all the frontends. My simple check can be found at:

https://github.com/opensciencegrid/osg-flock/blob/master/node-check/crl-check

and gives errors like this during glidein validation:

Executing /scratch/execute/dir_31822/glide_P5Ts3V/client/crl-check
Next update for CRL 62c4a178.r0 is Dec 19 17:00:00 2015 GMT
ERROR: CRL is expired, or about to expire! === Glidein ending Thu Mar 24 16:43:02 PDT 2016 (1458862982) with code 1 after 1207 ===



Also available in: Atom PDF