Changes between Version 21 and Version 22 of iRODSwithGSI


Ignore:
Timestamp:
12/04/12 12:12:57 (11 years ago)
Author:
Jeanne Ohren
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • iRODSwithGSI

    v21 v22  
    1818==== Using a regular X509 certificate ====
    1919
    20 I used both CiLogon and GENI/GCF certificates to access the "alice" account on the iRODS server.
     20I used both !CiLogon and GENI/GCF certificates to access the "alice" account on the iRODS server.
    2121The difference between the two types of certificates was getting the client and host certificates and CA certificates into the appropriate format.
    2222In both cases, a certificate and private key pair was installed on both the iRODS client and iRODS server.
     
    2727==== Using a regular X509 certificate with server authentication ====
    2828
     29Using the same regular X509 certificate configuration, I was able to add server authentication by adding the subject DN of the iRODS server certificate (hostcert.pem)
     30to the irodsEnv on the client.  This was specified using the irodsServerDn parameter.
     31
     32[[Image(ServerAuth.jpg)]]
     33
    2934==== Using a proxy certificate ====
    3035
    31 
     36I used proxy certificates generated two different ways to access the alice account on the iRODS server.
     37The first proxy certificate was generated using the Globus grid-proxy-init command.
     38The second proxy certificate was generated using openssl commands.  Both of these methods worked.
     39See details [below].
     40
     41[[Image(ProxyCert.jpg)]]
    3242
    3343=== Installation ===