[Go-essp-tech] [esg-node-dev] PKI to dap.cccma.uvic.ca

[Kettleborough, Jamie]

Hello Mike,

Thanks for getting back to me on this.  I've tried both ways.  I generated a wget script from the pcmdi gateway with the authzToken.  This works.  Then I took the same URL and tried to run with the --certificate, --private_key methods.  This gives the 404 response.

I think the requests would have come from an address like:
151.170.240.10
Though I can't be sure as I don't understand how our network is set up.

If you need any more information to help then let me know.

Thanks,

Jamie

> -----Original Message-----
> From: Mike Berkley [mailto:mike.berkley at gmail.com] 
> Sent: 22 September 2011 17:10
> To: Kettleborough, Jamie
> Cc: go-essp-tech at ucar.edu; esg-node-dev at lists.llnl.gov
> Subject: Re: [esg-node-dev] PKI to dap.cccma.uvic.ca
> 
> How are you trying to use that URL?
> 
> wget scripts from the PCMDI gateway (where CCCma is indexed) 
> use an authzToken for authentication.
> wget scripts from the BADC gateway use myproxy certificates, 
> specified with "--certificate" and "--private-key" on the 
> wget command line.
> 
> 
> 
> On Thu, Sep 22, 2011 at 02:56, Kettleborough, Jamie 
> <jamie.kettleborough at metoffice.gov.uk> wrote:
> >
> > Hello,
> >
> > Is there a problem with PKI to the CCCMA data at the 
> moment?  I think 
> > this has worked before for retrievals from uvic to BADC, 
> IPSL and DKRZ.
> >
> > I'm now getting 404 not found errors (Martin has confirmed BADC now 
> > get the same).
> >
> > Connecting to dap.cccma.uvic.ca|142.104.195.6|:443... connected.
> > WARNING: cannot verify dap.cccma.uvic.ca's certificate, issued by 
> > 
> `/O=Grid/OU=GlobusTest/OU=simpleCA-pcmdi3.llnl.gov/CN=dap.cccm
> a.uvic.ca'
> > :
> >  Self-signed certificate encountered.
> > HTTP request sent, awaiting response... 404 Not Found 
> 13:40:50 ERROR 
> > 404: Not Found.
> >
> > I think the file exists though as I've managed to fetch it 
> using the 
> > token based wget.  (And I don't think I've made a typo between the 
> > token based and PKI based tries).
> >
> > An example url is
> > 
> http://dap.cccma.uvic.ca/thredds/fileServer/esg_dataroot/AR5/CMIP5/out
> > pu 
> > 
> t/CCCma/CanESM2/historical/mon/atmos/tas/r1i1p1/tas_Amon_CanESM2_histo
> > ri
> > cal_r1i1p1_185001-200512.nc
> >
> > Thanks,
> >
> > Jamie
> >
> >
>