x509 grid certificate chains

Owned by Thomas, Jyothish (STFC,RAL,SC)
Apr 15, 2024
1 min read

The x509 certificates for the grid are installed via RPMS:

rpm -qa | grep ca_

to view the full list from an active gateway.

The CRLs are updated via a cron job:
/etc/cron.d/fetch-crl

that requires the fetch-crl-cron.service and runs the /usr/sbin/fetch-crl pearl script.

If you’re getting an invalid CRL error on attempts to authenticate using GSI, check if the fetch-crl-cron.service is running.