[Go-essp-tech] [esg-node-dev] PKI to dap.cccma.uvic.ca
Kettleborough, Jamie
jamie.kettleborough at metoffice.gov.uk
Fri Sep 23 02:17:49 MDT 2011
Hello Mike,
Thanks for getting back to me on this. I've tried both ways. I generated a wget script from the pcmdi gateway with the authzToken. This works. Then I took the same URL and tried to run with the --certificate, --private_key methods. This gives the 404 response.
I think the requests would have come from an address like:
151.170.240.10
Though I can't be sure as I don't understand how our network is set up.
If you need any more information to help then let me know.
Thanks,
Jamie
> -----Original Message-----
> From: Mike Berkley [mailto:mike.berkley at gmail.com]
> Sent: 22 September 2011 17:10
> To: Kettleborough, Jamie
> Cc: go-essp-tech at ucar.edu; esg-node-dev at lists.llnl.gov
> Subject: Re: [esg-node-dev] PKI to dap.cccma.uvic.ca
>
> How are you trying to use that URL?
>
> wget scripts from the PCMDI gateway (where CCCma is indexed)
> use an authzToken for authentication.
> wget scripts from the BADC gateway use myproxy certificates,
> specified with "--certificate" and "--private-key" on the
> wget command line.
>
>
>
> On Thu, Sep 22, 2011 at 02:56, Kettleborough, Jamie
> <jamie.kettleborough at metoffice.gov.uk> wrote:
> >
> > Hello,
> >
> > Is there a problem with PKI to the CCCMA data at the
> moment? I think
> > this has worked before for retrievals from uvic to BADC,
> IPSL and DKRZ.
> >
> > I'm now getting 404 not found errors (Martin has confirmed BADC now
> > get the same).
> >
> > Connecting to dap.cccma.uvic.ca|142.104.195.6|:443... connected.
> > WARNING: cannot verify dap.cccma.uvic.ca's certificate, issued by
> >
> `/O=Grid/OU=GlobusTest/OU=simpleCA-pcmdi3.llnl.gov/CN=dap.cccm
> a.uvic.ca'
> > :
> > Self-signed certificate encountered.
> > HTTP request sent, awaiting response... 404 Not Found
> 13:40:50 ERROR
> > 404: Not Found.
> >
> > I think the file exists though as I've managed to fetch it
> using the
> > token based wget. (And I don't think I've made a typo between the
> > token based and PKI based tries).
> >
> > An example url is
> >
> http://dap.cccma.uvic.ca/thredds/fileServer/esg_dataroot/AR5/CMIP5/out
> > pu
> >
> t/CCCma/CanESM2/historical/mon/atmos/tas/r1i1p1/tas_Amon_CanESM2_histo
> > ri
> > cal_r1i1p1_185001-200512.nc
> >
> > Thanks,
> >
> > Jamie
> >
> >
>
More information about the GO-ESSP-TECH
mailing list