Hello!
I'm trying to install the Globus Toolkit 4 on a Fedora 8 system.
The instructions I'm using to do so can be found here:
I'm at the Certificate Authorities point where I am supposed to sign the certificate though, and I'm having a bit of trouble that hopefully some wise person here can help me with.
I get the following error:
[globus@GRID9 ~]$ grid-ca-sign -in /etc/grid-security/hostcert_request.pem -out hostsigned.pem
ERROR: The file: /etc/grid-security/hostcert_request.pem is not readable
I also noticed that when I tried to get a host certificate for the machine, it said that it was written to:
/root/.globus/userkey.pem
Instead of the following directory like it says in the installation instructions:
/etc/grid-security/hostkey.pem
Lastly, why does it say that "GRID9: command not found" when I try to use it as an argument for the hostname?
The output previous is as follows:
[root@GRID9 etc]# export GLOBUS_LOCATION=/usr/local/globus-4.0.1
[root@GRID9 etc]# /usr/local/globus-4.0.1/setup/globus_simple_ca_cfd1c845_setup/setup-gsi -default
Subroutine Compress::Zlib::gzFile::gzseek redefined at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 214.
setup-gsi: Configuring GSI security
Installing /etc/grid-security/certificates//grid-security.conf.cfd1c845...
Running grid-security-config...
Installing Globus CA certificate into trusted CA certificate directory...
Installing Globus CA signing policy into trusted CA certificate directory...
setup-gsi: Complete
[root@GRID9 etc]# ls /etc/grid-security/
certificates globus-host-ssl.conf globus-user-ssl.conf grid-security.conf
[root@GRID9 etc]# ls /etc/grid-security/certificates/
cfd1c845.0 globus-user-ssl.conf.cfd1c845
cfd1c845.signing_policy grid-security.conf.cfd1c845
globus-host-ssl.conf.cfd1c845
[root@GRID9 etc]# source $GLOBUS_LOCATION/etc/globus-user-env.sh
[root@GRID9 etc]# grid-cert-request -host `GRID9`
bash: GRID9: command not found
Generating a 1024 bit RSA private key
...........++++++
........++++++
writing new private key to '/root/.globus/userkey.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Level 0 Organization [Grid]:Level 0 Organizational Unit [GlobusTest]:Level 1 Organizational Unit [simpleCA-grid9]:Level 2 Organizational Unit []:Name (e.g., John M. Smith) []:
A private key and a certificate request has been generated with the subject:
/O=Grid/OU=GlobusTest/OU=simpleCA-grid9/CN=root
If the CN=root is not appropriate, rerun this
script with the -force -cn "Common Name" options.
Your private key is stored in /root/.globus/userkey.pem
Your request is stored in /root/.globus/usercert_request.pem
Please e-mail the request to the Globus Simple CA grid_9@GRID9
You may use a command similar to the following:
cat /root/.globus/usercert_request.pem | mail grid_9@GRID9
Only use the above if this machine can send AND receive e-mail. if not, please
mail using some other method.
Your certificate will be mailed to you within two working days.
If you receive no response, contact Globus Simple CA at grid_9@GRID9
[globus@GRID9 gt4.0.6-x86_fc_4-installer]$ cd ..
[globus@GRID9 Desktop]$ cd ..
[globus@GRID9 ~]$ grid-ca-sign -in /etc/grid-security/hostcert_request.pem -out hostsigned.pem
ERROR: The file: /etc/grid-security/hostcert_request.pem is not readable
Thanks for any help provided