NL e-Infra Zero CA
switch to print layout
This NL e-Infra Zero worthless CA is only used for tutorials organised
by the Dutch e-Infrastructure. Certificates issued by this
CA (only to users) are recognised on a small subset of systems, and then only
during the tutorials. It has no policy other than that the tutors can issue
a certificate to anyone they like.
Generating your requestYour tutorial handout will tell you how to generate the request, but as far as this CA is concerned, you can generate your certificate request any way your like, as long as you can submit it in text format to the validation interface. The easiest way is actually a single "OpenSSL" command (OpenSSL being the most popular tool for manipulating these things called "X.509 certificates"). Only the common name in your subject name will be used by the CA and it must be unique, so using your full name and any initials you have will help ensure uniqueness.
Run the following commands, replacing "Pietje Puk 42" with your own name:
mkdir $HOME/.globus openssl req -subj "/CN=Pietje Puk 42" -out $HOME/.globus/userrequest.pem -keyout $HOME/.globus/userkey.pem -newThen go to the submission web form and post your "userrequest.pem" file or its contents there. You will see a confirmation page when the upload has succeeded. After a successful upload, ask your tutor to validate your request. As soon as the tutor has done that, you can download your certificate in text format and store it, as usercert.pem, next to your private key.
Download your certificateLook up your name in the list of valid certificates here.
For TutorsAll tutors must have a valid certifite from an IGTF accredited CA, and must be registred with the NL e-Infra Zero tutorial CA to act as tutors. Send the subject name of your certificate, with details of the upcoming tutorial, to the DutchGrid CA to register.
Once registred, you have access to the RA interface and you can: