| 42 | | * '''certificates''' |
| 43 | | * QCG-Broker' certificate and private key signed by one of trusted Certificate Authorities [CA], |
| 44 | | * set of trusted CA certificates (must be coppied either into `/etc/grid-security/certificates` or `QCG-BROKER_USER_HOME/.globus/certificates` directory) |
| 45 | | |
| 46 | | For the PL-Grid Project install Polish Grid and PL-Grid Simpla-CA certificates: |
| 47 | | {{{ |
| 48 | | #!div style="font-size: 90%" |
| 49 | | {{{#!sh |
| 50 | | |
| 51 | | #add appropriate YUM repositories |
| 52 | | cat > /etc/yum.repos.d/plgrid.repo << EOF |
| 53 | | [PLGRID-general] |
| 54 | | name=PLGRID general packages repository |
| 55 | | baseurl=http://software.plgrid.pl/packages/general/ |
| 56 | | enabled=1 |
| 57 | | metadata_expire=300 |
| 58 | | gpgcheck=0 |
| 59 | | EOF |
| 60 | | |
| 61 | | cat > /etc/yum.repos.d/eugridpma.repo << EOF |
| 62 | | [EUGRIDPMA-igtf] |
| 63 | | name=EUGRIDPMA igtf repository |
| 64 | | baseurl=https://dist.eugridpma.info/distribution/igtf/current |
| 65 | | enabled=1 |
| 66 | | metadata_expire=300 |
| 67 | | gpgcheck=0 |
| 68 | | |
| 69 | | [EUGRIDPMA-fetch-crl] |
| 70 | | name=EUGRIDPMA fetch-crl repository |
| 71 | | baseurl=https://dist.eugridpma.info/distribution/util/fetch-crl/ |
| 72 | | enabled=1 |
| 73 | | metadata_expire=300 |
| 74 | | gpgcheck=0 |
| 75 | | EOF |
| 76 | | |
| 77 | | #install certificates |
| 78 | | yum install ca_PolishGrid |
| 79 | | yum install ca_PLGRID-SimpleCA |
| 80 | | |
| 81 | | #install certificate revocation list fetching utility |
| 82 | | yum install fetch-crl |
| 83 | | |
| 84 | | #get fresh CRLs now |
| 85 | | /usr/sbin/fetch-crl |
| 86 | | |
| 87 | | #install cron job for it |
| 88 | | cat > /etc/cron.daily/fetch-crl.cron << EOF |
| 89 | | #!/bin/sh |
| 90 | | /usr/sbin/fetch-crl |
| 91 | | EOF |
| 92 | | |
| 93 | | chmod a+x /etc/cron.daily/fetch-crl.cron |
| 94 | | }}} |
| 95 | | }}} |
| | 42 | * '''certificates''' - set of CA certificates has to be installed to allow proper mutual authentication between client and service. |
| | 43 | * [[https://www.qoscosgrid.org/trac/qcg/wiki/CA%20certificates | CA certificates installation]] |
