Skip to content
Snippets Groups Projects
  • Christoph Anton Mitterer's avatar
    fb422dce
    use host cert/key from standard locations · fb422dce
    Christoph Anton Mitterer authored
    
    Every time the host certificates are renewed, there’s a chance to forget about
    the copies of these for xrootd, which are per default in
    “/etc/grid-security/xrd”.
    Instead, the host certificate and key shall be read from the “standard”
    locations.
    
    • Set options to read the host certificate and key from
      “/etc/grid-security/hostcert.pem” respectively
      “/etc/grid-security/hostkey.pem”.
    
    For this to work, the files must be readable by the user that runs the daemon,
    which can, for example, be accomplished via ACLs using a command like:
    setfacl -m u:xcache:r /etc/grid-security/hostkey.pem
    
    Signed-off-by: default avatarChristoph Anton Mitterer <mail@christoph.anton.mitterer.name>
    fb422dce
    History
    use host cert/key from standard locations
    Christoph Anton Mitterer authored
    
    Every time the host certificates are renewed, there’s a chance to forget about
    the copies of these for xrootd, which are per default in
    “/etc/grid-security/xrd”.
    Instead, the host certificate and key shall be read from the “standard”
    locations.
    
    • Set options to read the host certificate and key from
      “/etc/grid-security/hostcert.pem” respectively
      “/etc/grid-security/hostkey.pem”.
    
    For this to work, the files must be readable by the user that runs the daemon,
    which can, for example, be accomplished via ACLs using a command like:
    setfacl -m u:xcache:r /etc/grid-security/hostkey.pem
    
    Signed-off-by: default avatarChristoph Anton Mitterer <mail@christoph.anton.mitterer.name>