Skip to content
Snippets Groups Projects

Resolve "Setup test proxy certificates and basic VOMS module testing"

Merged Resolve "Setup test proxy certificates and basic VOMS module testing"
1-setup-nginx-voms-module-testing/1 into master
1 unresolved thread
Merged Nicholas Terranova requested to merge 1-setup-nginx-voms-module-testing/1 into master
1 unresolved thread
Viewing commit 66f55fea
Prev
Show latest version
3 files
+ 25
− 21
Compare changes
  • Side-by-side
  • Inline
Files
3
  • 66f55fea 
    Merge branch '1-setup-nginx-voms-module-testing/1' of baltig.infn.it:storm2/ngx_http_voms_module into 1-setup-nginx-voms-module-testing/1

* '1-setup-nginx-voms-module-testing/1' of baltig.infn.it:storm2/ngx_http_voms_module:
  added line to run prove to README.md
  fixed README.md, adding links
  use relative paths for X509_VOMS_DIR and X509_CERT_DIR
t/certs/README.md
+ 17
− 2
TBD:
=======
 
# Certificates for ngx\_http\_voms\_module Testing
Add docs on certs here
Proxy certificates are generated using [VOMS client 3.3.0](http://italiangrid.github.io/voms/documentation/voms-clients-guide/3.0.3/):
 
 
* 0.pem: long-lived proxy certificate, without Attribute Certificate (AC);
 
* 1.pem: long-lived proxy certificate, with an expired AC;
 
* 2.pem: expired proxy certificate.
 
 
To obtain such certificates the following command is used:
 
 
VOMS_CLIENTS_JAVA_OPTIONS="-Dvoms.fake.vo=test.vo -Dvoms.fake=true -Dvoms.fake.aaCert=<path_to_cert>/voms_example.cert.pem -Dvoms.fake.aaKey=<path_to_key>/voms_example.key.pem" voms-proxy-init3 -voms test.vo -cert <path_to_test0>/test0.p12 --valid <validity>
 
 
*voms\_example.cert.pem* and *voms\_example.ket.pem* can be found in the `certs` folder.
 
 
To perform correctly the VOMS AC validation, a \*.lsc or \*.pem file is needed in `/etc/grid-security/vomsdir`, see [VOMS client 3.3.0 User Guide](http://italiangrid.github.io/voms/documentation/voms-clients-guide/3.0.3/) for further details. An example of *voms.example.lsc* can be found in `vomsdir/test.vo`.
 
 
Nginx server certificate and key are nginx\_voms\_example.cert.pem and nginx\_voms\_example\_key.pem.