OUTILS - PARTIE 1
AUTHENTIFICATION ET AUTORISATION

Import the certificate in the web brower

Mozilla:
In the menu Edit/Preferences go to "Privacy & Security" then "certificates".
Click on "Manage Certificates". Click then on the "Import" button.

Internet Explorer:
In the menu Tools/Internet Options, go to "content" and click on "certificates".
Click then on the "Import" button.

How to connect to the UI

$ ssh username@ui

Create the .globus directory

$ cd ~/
$ mkdir .globus

Verify your certificate is here

$ cd certificate/
$ ls
<username>.p12

Convert your certificate from pk12 to pem

$ openssl pkcs12 -in <username>.p12 -clcerts -nokeys -out ~/.globus/usercert.pem
$ openssl pkcs12 -in <username>.p12 -nocerts -out ~/.globus/userkey.pem
$ cd ~/.globus
$ ls
usercert.pem userkey.pem

Convert your certificate from pem to pk12

$ cd ~/.globus
$ openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -out packed-cert.p12

Change the rights on the certificate

$ chmod 400 userkey.pem
$ chmod 444 usercert.pem
$ ll
-r--r--r--    1 username   username       1610 Nov  9 15:34 usercert.pem
-r--------    1 username   username       1919 Nov  9 15:35 userkey.pem

Make a copy of your certificate

$ cp  -rp ~/.globus ~/.globus.original

Use the openssl command to read the content of your certificate.

$ openssl x509 -text -noout -in usercert.pem

Create a proxy

$ voms-proxy-init --voms vo_name

View the informations of a proxy

$ voms-proxy-info -all

OUTILS - PARTIE 1 AUTHENTIFICATION ET AUTORISATION