Changes between Version 7 and Version 8 of GeniTrustAnchors

Timestamp:

05/30/14 15:19:08 (10 years ago)

Author:

tupty@bbn.com

Comment:

--

GeniTrustAnchors

@@ -7 +7 @@
 A note on certificate types:
  * A self-signed SA certificate can be added to an aggregate's list of trusted certificates by itself --- it contains everything the aggregate needs in order to trust that slice authority
- * MA and CA certificates for a host can be used as a pair --- the MA certificate signs certificates presented by individual experimenters, while the CA is the self-signed certificate needed to complete the chain to a trust root.  For most GENI aggregates, you need only install the CA cert, and the entire chain will be trusted.  However, we provide the MA cert as well in case any aggregates need both, and installing both should be harmless.
+ * A self-signed CA certificate should be all that is needed to complete the chain to a trust root.
 
 = Recommended GENI slice authorities =
@@ -17 +17 @@
 || '''Description'''               || '''Hostname'''         || '''Certificate type''' || '''Certificate Expiration''' || '''File/Checksum'''                                                         ||
 || GENI clearinghouse              || ch.geni.net            || CA (self-signed)       || 2018-05-19                   || [attachment:ch.geni.net-ca.pem 40c979b9477822f353027ab91dc7a296]            ||
-|| GENI clearinghouse              || ch.geni.net            || MA (signed by CA)      || 2018-05-19                   || [attachment:ch.geni.net-ma.pem ffc8b06bd198a429245f7ef9eedaa3fb]            ||
 || Utah ProtoGENI                  || emulab.net             || SA (self-signed)       || 2015-05-25                   || [attachment:emulab.net.pem e9e6389938d71fed6ab8d667ac91f60a]                ||
 || !PlanetLab Central              || planet-lab.org         || SA (self-signed)       || 2016-09-04                   || [attachment:plc.pem 4f0182127f4d4dc3c553d9d4a9a1a825]                       ||