[Go-essp-tech] wget download certificate timeouts

[Cinquini, Luca (3880)]

Hi Stephen,
can you please remind me of how to change the MyProxy maximum lifetime on the server side ? I think Neill sent instructions but I can't find them any more...
thanks, Luca

On Jul 18, 2011, at 3:55 AM, <stephen.pascoe at stfc.ac.uk<mailto:stephen.pascoe at stfc.ac.uk>> wrote:

Last week Garry raised the problem of myproxy certificate timeouts when downloading data using wget scripts.

We have talked several times about increasing the default and/or maximum certificate lifetime for certificates issued by out myproxy servers.  I recall we agreed to increase the maximum lifetime to 72 hours.  This has been the case at the CEDA myproxy service for a few weeks now.  I have tested PCMDI's service and it only issues certificates for 1 day.

Garry, if you have a CEDA OpenID you can get a 72 hour certificate if you use the myproxy-logon [1] or myproxyclient [2] tools by adding "-t 72" to your command.  I'm not sure whether the most recent java webstart app allows you to set this.  I hope PCMDI and other centres will deploy the 72 hour maximum lifetime soon.  Would this meet your requirements?

[1] http://www.globus.org/toolkit/
[2] http://pypi.python.org/pypi/MyProxyClient

Cheers,
Stephen


---
Stephen Pascoe  +44 (0)1235 445980
Centre of Environmental Data Archival
STFC Rutherford Appleton Laboratory, Harwell Oxford, Didcot OX11 0QX, UK



--
Scanned by iCritical.

_______________________________________________
GO-ESSP-TECH mailing list
GO-ESSP-TECH at ucar.edu<mailto:GO-ESSP-TECH at ucar.edu>
http://mailman.ucar.edu/mailman/listinfo/go-essp-tech

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ucar.edu/pipermail/go-essp-tech/attachments/20110718/bb0322f2/attachment.html