From b43975774785d9928af9fd47e34b2c6cc25085e8 Mon Sep 17 00:00:00 2001 From: Manuel Giffels Date: Tue, 17 Jun 2014 12:38:47 +0200 Subject: [PATCH] Update instructions to get hostcert from gridca.cern.ch --- environ/vm-setup.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/environ/vm-setup.rst b/environ/vm-setup.rst index 7f5fe63..07dc723 100644 --- a/environ/vm-setup.rst +++ b/environ/vm-setup.rst @@ -44,16 +44,16 @@ CERN VMM virtual machine A. Generate private key/certificate with the following command:: - openssl req -new -subj "/CN=`hostname -f`" -out newcsr.csr -nodes -sha1 + openssl req -new -subj "/CN=`hostname -f`" -out newcsr.csr -nodes -sha512 -newkey rsa:2048 B. Send the request to CERN CA: go to *New Host Certificate* on - https://ca.cern.ch web site and select host for which you request + https://gridca.cern.ch/gridca/ web site and select host for which you request a certificate. Copy/Paste in the text box the content of file newcsr.csr generated by OpenSSL and click Submit. Click Download Certificate *Base 64 Encoded* and save the file in the same folder as newcsr.csr. Then run the following set of commands:: - sudo mv newcert.cer /etc/grid-security/hostcert.pem + sudo mv host.cert /etc/grid-security/hostcert.pem sudo mv privkey.pem /etc/grid-security/hostkey.pem sudo chmod 400 /etc/grid-security/hostkey.pem sudo chown root:root /etc/grid-security/host{cert,key}.pem