(r4) GridCertificates < HEPLAB

Tags: view all tags
%TOC%

---+ How to obtain a new GRID certificate

Follow the procedure described in [[https://access.hellasgrid.gr/register/registration_form]]

---+ How to renew your GRID certificate or manage your account

Use the menus at [[https://access.hellasgrid.gr/account]]

---+ Extracting usercert.pem and userkey.pem from a PKCS12 bundle file

   1 Save your *latest valid* GRID certificate from your web browser were it was installed to a PKCS12 file, e.g. to !MyCertificate.p12<br /><span class="WYSIWYG_COLOR" style="color: red;"> _The procedure to export the certificate varies from browser to browser._ </span><br />For *Firefox*, the steps to follow are:
      1 Edit → Preferences → Advanced → select _Certificates_ tab → View Certificates → Your Certificates
      1 Select the *latest valid* certificate to be saved and click the "<strong>Backup...</strong>" button
      1 Save the file, e.g. as _MyCertificate.p12_ (You will be asked to provide a <span class="WYSIWYG_COLOR" style="color: green;">password</span>, to be used later. __Use a complex one!__)
   1 Transfer the file _MyCertificate.p12_ to your home directory at alpha.physics.uoi.gr
   1 Login to alpha.physics.uoi.gr and use the following commands (use cut&paste)
      1 <verbatim>opensslÂ pkcs12Â -nocertsÂ -inÂ ~/MyCertificate.p12Â -outÂ ~/userkey.pem</verbatim>
         * you will be asked for the <span class="WYSIWYG_COLOR" style="color: green;">password</span> used to create the PKCS12 file
         * you will then be asked to provide a _PEM pass phrase_ for the key encryption. __Use a complex one!__
      1 <verbatim>opensslÂ pkcs12Â -clcertsÂ -nokeysÂ -inÂ ~/MyCertificate.p12Â -outÂ ~/usercert.pem</verbatim>
         * you will be asked for the <span style="color: green;">password</span> used to create the PKCS12 file
      1 <verbatim>chmodÂ 0400Â ~/userkey.pem</verbatim>
      1 <verbatim>chmodÂ 0644Â ~/usercert.pem</verbatim>
      1 <verbatim>mkdirÂ -pÂ ~/.globus</verbatim>
      1 <verbatim>mvÂ -fÂ ~/MyCertificate.p12Â ~/userkey.pemÂ ~/usercert.pemÂ ~/.globus</verbatim>
   1 You may now copy the directory ~/.globus from alpha.physics.uoi.gr to any UNIX machine from where you need to access the GRID, e.g. <verbatim>scpÂ -rpÂ ~/.globusÂ username@lxplus.cern.ch:</verbatim>

---+ Generate a PKCS12 bundle file from existing PEM files

To generate a <a href="https://www.everipedia.com/pkcs-12/" target="_blank">PKCS12</a> bundle file from existing PEM files (e.g. ~/NewCertificate.p12 from ~/.globus/userkey.pem and ~/.globus/usercert.pem)<br />on alpha.physics.uoi.gr, use the command:
   * <verbatim>opensslÂ pkcs12Â -exportÂ -inÂ ~/.globus/usercert.pemÂ -inkeyÂ ~/.globus/userkey.pemÂ -nameÂ "MyÂ NewÂ Certificate"Â -outÂ ~/NewCertificate.p12</verbatim>
      * you will be asked for the <span class="WYSIWYG_COLOR" style="color: green;">PEM pass phrase</span> used to encrypt the PEM key
      * you will be asked to provide an _export password_ to be used later. __Use a complex one!__

-- Main.IoannisPapadopoulos - 2009-10-27
Topic revision: r4 - 2016-03-20 - LouisCie
~~Edit~~
~~Attach~~