| 264 | |
| 265 | 3. Get the certificate: |
| 266 | {{{ |
| 267 | $ ./lamp-getcertificate.py -n lnevers-lamp-slice1 |
| 268 | Got my SA credential, looking up lnevers-lamp-slice1 |
| 269 | Asking for slice credential for lnevers-lamp-slice1 |
| 270 | Got the slice credential |
| 271 | Asking for my lamp certificate |
| 272 | Paste the following certificate *as is* into a file called lampcert.pem |
| 273 | Upload the certificate to all LAMP enabled nodes at /usr/local/etc/protogeni/ssl/lampcert.pem |
| 274 | -----BEGIN RSA PRIVATE KEY----- |
| 275 | |
| 276 | .. many lines of output not show here.... |
| 277 | -----END CERTIFICATE----- |
| 278 | }}} |
| 279 | |
| 280 | 5. Determined which node to which to upload the LAMP certificate, and then upload certificate to /usr/local/etc/protogeni/ssl/lampcert.pem on each node. |
| 281 | {{{ |
| 282 | $ grep "login" lnevers-lamp-slice1-manifest.xml |
| 283 | <services> <login authentication="ssh-keys" hostname="pc151.emulab.net" port="22" username="lnevers"/> </services> </node> |
| 284 | <services> <login authentication="ssh-keys" hostname="pc157.emulab.net" port="22" username="lnevers"/> </services> </node> |
| 285 | <services> <login authentication="ssh-keys" hostname="pc150.emulab.net" port="22" username="lnevers"/> </services> </node> |
| 286 | |
| 287 | $ for node in pc151.emulab.net pc157.emulab.net pc150.emulab.net; do scp lampcert.pem lnevers@$node:.; ssh lnevers@$node "sudo mv lampcert.pem /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo chown root.perfsonar /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo chmod 440 /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo /etc/init.d/psconfig restart"; done |
| 288 | lampcert.pem 100% 4226 4.1KB/s 00:00 |
| 289 | /etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped |
| 290 | waiting... |
| 291 | /opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar |
| 292 | /etc/init.d/psconfig start: perfSONAR pSConfig Service started |
| 293 | lampcert.pem 100% 4226 4.1KB/s 00:00 |
| 294 | /etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped |
| 295 | waiting... |
| 296 | /opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar |
| 297 | /etc/init.d/psconfig start: perfSONAR pSConfig Service started |
| 298 | lampcert.pem 100% 4226 4.1KB/s 00:00 |
| 299 | /etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped |
| 300 | waiting... |
| 301 | /opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar |
| 302 | /etc/init.d/psconfig start: perfSONAR pSConfig Service started |
| 303 | }}} |