(r9) SHA-2CompliantCampaign < SiteAdminCorner

Tags: , view all tags
---+!! SHA-2 Compliant Campaign
%TOC%

---+ Problema
Dal 1 Ottobre 2013, le CA inizieranno a rilasciare certificati SHA-2 di default. Occorre quindi gestire una fase di transizione in cui ci saranno utenti e servizi con certificati SHA-1 (in scadenza) e nuovi certificati in SHA-2.

Al fine di monitorare lo stato dei servizi presenti nell'infrastruttura, sono stati sviluppati dei test ad-hoc descritti [[https://wiki.egi.eu/wiki/MW_SAM_tests#SHA-2_tests][QUI]].

---+ SHA-2 support middleware baseline
L'elenco dei servizi Grid compliant con SHA-2 è disponibile al seguente [[https://wiki.egi.eu/wiki/SHA-2_support_middleware_baseline][LINK]]

---+ Elenco servizi CORE da aggiornare
Da un prima ricognizione, risultano da aggiornare i seguenti servizi CORE.

---++ VOMS
|HOSTNAME|SERVICE|TEST LINK|STATO|
|voms-01.pd.infn.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|voms-02.pd.infn.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|voms.consorzio-cometa.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|voms.ct.infn.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|voms.research-infrastructures.eu|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|vomsIGI-NA.unina.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|
|vomsmania.cnaf.infn.it|eu.egi.sec.VOMS-SHA-2|disattivati|2013-07-29|

---++ WMS
|HOSTNAME|SERVICE|TEST LINK|STATO|
|eu-india-02.pd.infn.it|eu.egi.sec.WMS-SHA-2|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=eu-india-02.pd.infn.it&service=eu.egi.sec.WMS-SHA-2][LINK]]|Aggiornato (2013-07-29)|
|wms-4.dir.garr.it|eu.egi.sec.WMS-SHA-2|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=wms-4.dir.garr.it&service=eu.egi.sec.WMS-SHA-2][LINK]]|DA AGGIORNARE (2013-07-29)|
|wms-enmr.cerm.unifi.it|eu.egi.sec.WMS-SHA-2|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=wms-enmr.cerm.unifi.it&service=eu.egi.sec.WMS-SHA-2][LINK]]|DA AGGIORNARE (2013-07-29)|
|wmsdecide.dir.garr.it|eu.egi.sec.WMS-SHA-2|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=wmsdecide.dir.garr.it&service=eu.egi.sec.WMS-SHA-2][LINK]]|DA AGGIORNARE (2013-07-29)|

---+ Elenco servizi SITE da aggiornare
Da una prima ricognizione, risultano da aggiornare i seguenti servizi SITE (attenzione: lasciare in sospeso l'aggiornamento di STORM).

---++ CREAM
|HOSTNAME|SERVICE|TEST LINK|STATO|
|arcserv.ira.inaf.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=arcserv.ira.inaf.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-29)|
|argoce01.na.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=argoce01.na.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|sito sospeso il 22 luglio|
|atlasce02.scope.unina.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=atlasce02.scope.unina.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|Aggiornato (2013-07-29)|
|atlasce2.lnf.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=atlasce2.lnf.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|Aggiornato (2013-07-22)|
|ce-02.roma3.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=ce-02.roma3.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|reinstallazione a Settembre (2013-07-23)|
|ce-1.le.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=ce-1.le.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|ce.scope.unina.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=ce.scope.unina.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|Aggiornato (2013-07-22)|
|ce01.oats.inaf.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=ce01.oats.inaf.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|FATTO (2013-07-22)|
|cmsrm-cream01.roma1.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=cmsrm-cream01.roma1.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|FATTO (2013-07-22)|
|cream-ce.research-infrastructures.eu|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=cream-ce.research-infrastructures.eu&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|creamce01.ge.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=creamce01.ge.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|egice.polito.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=egice.polito.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|grid-ce.pv.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=grid-ce.pv.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|gridsrv2-4.dir.garr.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=gridsrv2-4.dir.garr.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|gridvm03.roma2.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=gridvm03.roma2.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|FATTO (2013-23-16)|
|grisuce.scope.unina.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=grisuce.scope.unina.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]| FATTO (2013-07-22)|
|recasna-ce01.unina.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=recasna-ce01.unina.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|t2-ce-05.mi.infn.it|eu.egi.sec.CREAMCE-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=t2-ce-05.mi.infn.it&service=eu.egi.sec.CREAMCE-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|

---++ STORM
*NB: storm è compliant a SHA-2 dalla versione EMI-3. Al momento si raccomanda di NON AGGIORNARE a EMI-3 perchè gli sviluppatori stanno investigando su un bug importante.*
Di seguito è comunque riportata la situazione anche per questo servizio.

|HOSTNAME|SERVICE|TEST LINK|STATO|
|bostorm.bo.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=bostorm.bo.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|egise.polito.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=egise.polito.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|egridglitese.crs4.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=egridglitese.crs4.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|grid-se2.pr.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=grid-se2.pr.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|grid03.ge.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=grid03.ge.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|grid2.fe.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=grid2.fe.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|gridsrm.pi.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=gridsrm.pi.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|gridsrm.ts.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=gridsrm.ts.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|gridvm01.roma2.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=gridvm01.roma2.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|linucs-se-01.cs.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=linucs-se-01.cs.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|pamelase01.na.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=pamelase01.na.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|prod-se-01.ct.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=prod-se-01.ct.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|prod-se-01.pd.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=prod-se-01.pd.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|se-1.le.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=se-1.le.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|se-srm-00.to.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=se-srm-00.to.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|se.grid.unipg.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=se.grid.unipg.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|se01-lhcb-t2.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=se01-lhcb-t2.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|se01.oats.inaf.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=se01.oats.inaf.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|sebo-t3-01.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=sebo-t3-01.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-01.roma3.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-01.roma3.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-fe-alice.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-fe-alice.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-fe-archive.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-fe-archive.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-fe-lhcb.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-fe-lhcb.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-fe-superb.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-fe-superb.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm-fe.cr.cnaf.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm-fe.cr.cnaf.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|storm.mib.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=storm.mib.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|
|stormfe1.pi.infn.it	|eu.egi.sec.StoRM-SHA-2	|[[https://midmon.egi.eu/nagios/cgi-bin/extinfo.cgi?type=2&host=stormfe1.pi.infn.it&service=eu.egi.sec.StoRM-SHA-2][LINK]]|DA AGGIORNARE (2013-07-16)|

---+ Stato dei ticket

| SITO | SERVIZIO | TICKET | STATO | NOTE |
|AREA-BO|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15565][15565]]|OPEN||
|CIRMMP|WMS|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15610][15610]]|IN PROGRESS|a partire dal 26 agosto|
|CNR-PROD-PISA|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15567][15567]]|OPEN||
|GARR-01-DIR|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15568][15568]]|OPEN||
|GILDA-INFN-CATANIA|VOMS|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15570][15570]]|OPEN||
|GRISU-COMETA-INFN-CT|VOMS|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15571][15571]]|CLOSED|sito sospeso il 22 luglio|
|GRISU-UNINA|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15572][15572]]|SOLVED||
|INAF-TS|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15573][15573]]|SOLVED||
|INFN-FRASCATI|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15574][15574]]|SOLVED||
|INFN-GENOVA|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15575][15575]]|OPEN||
|INFN-LECCE|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15576][15576]]|OPEN||
|INFN-MILANO-ATLASC|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15577][15577]]|OPEN||
|INFN-PAVIA|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15579][15579]]|OPEN||
|INFN-ROMA1-CMS|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15580][15580]]|SOLVED||
|INFN-ROMA2|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15583][15583]]|SOLVED||
|INFN-ROMA3|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15582][15582]]|In Progress|reinstallazione a Settembre|
|ISMB|CREAM|[[https://ticketing.cnaf.infn.it/checklist-new/modules/xhelp/ticket.php?id=15581][15581]]|OPEN||



-- Main.PaoloVeronesi - 2013-07-16
Topic revision: r9 - 2013-07-30 - AlessandroPaolini
Account
- Log In
~~Edit~~
~~Attach~~