GLITE Tutorial

3. Install your Personal Certificate in the GILDA UI

Now install in the UI the exported certificate (e.g. file certificate.p12).

Perform the following steps outside the UI:
  • Install the exported certificate certificate.p12 on a network-accessible server host.
    You should be able to download the certificate from the server by secure copy (SSH protocol) or file transfer (FTP protocol) or web access (HTTP protocol).
Perform the following steps inside the UI:
  • Login as user gildauser.
    Password: gildauser
  • Create in your home directory a subdirectory .globus and go to that directory.
          mkdir .globus
          cd .globus
    
  • Download the certificate certificate.p12 from the server host by one of the following commands:
    scp host:/path/certificate.p12 . (secure copy)
    ftp host (file transfer)
    wget http://host/path/certificate.p12 (web access)
    (Afterwards erase your certificate from the server.)

  • Convert your certificate and private key from the PKCS12 format to the PEM format:
          openssl pkcs12 -clcerts -nokeys -in certificate.p12 -out usercert.pem
          openssl pkcs12 -nocerts -in certificate.p12 -out userkey.pem
    
  • Hide your private key from other users:
          chmod go-rwx userkey.pem
    

EGEE JKU RISC