Skip to content

Commit

Permalink
I have a small error with the creation of the lsc voms file from quat…
Browse files Browse the repository at this point in the history
…tor on openssl-1.1.1k-6.el8.x86_64:

  e.g --> https://stackoverflow.com/questions/56130510/openssl-issuer-subject-format-differences

  On the ncm component
  /usr/lib/perl/NCM/Component/vomsclient.pm

  cat  ./lib/perl/NCM/Component/vomsclient.pm |grep openssl
   my $subject = echo "$cert" | openssl x509 -noout -subject`;
   my $issuer = echo "$cert" | openssl x509 -noout -issuer`;

  I  add the compat -nameopt (LLR and LPNHE)
  So
  my $subject = echo "$cert" | openssl x509 -noout -subject -nameopt compat`;
  my $issuer = echo "$cert" | openssl x509 -noout -issuer -nameopt compat`;

  The default format with "commas" is not understood with xrootd voms lib and the extraction of voms attributes failed
  • Loading branch information
evamvak-source committed Apr 2, 2024
1 parent b31296d commit 38c47ff
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions ncm-vomsclient/src/main/perl/vomsclient.pm
Original file line number Diff line number Diff line change
Expand Up @@ -349,7 +349,7 @@ sub getCertSubject () {

# Extract the subject name using OpenSSL to help avoid
# typos.
my $subject = `echo "$cert" | openssl x509 -noout -subject`;
my $subject = `echo "$cert" | openssl x509 -noout -subject -nameopt compat`;
if ($?) {
$self->error("cannot extract subject name for certificate");
return(undef);
Expand Down Expand Up @@ -378,7 +378,7 @@ sub getIssuer () {
return;
}

my $issuer = `echo "$cert" | openssl x509 -noout -issuer`;
my $issuer = `echo "$cert" | openssl x509 -noout -issuer -nameopt compat`;
if ($?) {
$self->error('cannot extract issuer name from certificate');
return(undef);
Expand Down

0 comments on commit 38c47ff

Please sign in to comment.