| 50 | | '''Note: this procedure is now obsolete and kept here just for reference. Follow indications at wiki:Doc/gLite/Updates#ListofTrustedCAs.''' |
| 51 | | |
| 52 | | Trusted CAs are described in a set of RPMs, updated regularly. There is one template describing all the trusted CAs RPMs that must be loaded. This is : |
| 53 | | * For gLite : [source:templates/trunk/grid/glite-3.2/common/security/ca-policy-egi-core.tpl common/security/ca-policy-egi-core.tpl] |
| 54 | | |
| 55 | | This template is maintained by EGI and new versions are announced trough EGI broadcast. At the time of this writing (10/2/2011), the source is http://egi-igtf.ndpf.info/distribution/egi/current/meta/ca-policy-egi-core.tpl but look at URL in announcements. |
| 56 | | |
| 57 | | I addition to downloading the template, it is necessary to download the new CA RPMs from the location indicated in the announcement. In QWG templates, these RPMs are stored in a specific RPM repository. It is a good practice to rename the corresponding directory, create a new one with the same name and download the new RPMs in this empty directory. For example, for CA 1.9 (replace the directory in the example by the directory corresponding to CA RPMs repository) : |
| 58 | | {{{ |
| 59 | | cd /your/scdb/top/level/dir |
| 60 | | mv /www/htdocs/packages/ca /www/htdocs/packages/ca.old |
| 61 | | mkdir /www/htdocs/packages/ca |
| 62 | | # Look at URL mentionned in the announcemet |
| 63 | | utils/misc/rpmUpdate /www/htdocs/packages/ca http://repository.egi.eu/sw/production/cas/1/current/RPMS/ |
| 64 | | }}} |
| 65 | | |
| | 50 | Instructions have been moved to a [wiki:Doc/gLite/Updates#ListofTrustedCAs another page]. |
