What's new

New version of CREAM including a fix in the glite-security-lcmaps-plugins-verify-proxy package. The fix addresses a problem affecting users holding a Terena grid certificate when they submit to CREAM through WMS.

Installation and configuration

• (Re)configuration is needed after the installation/update.
• If the new blparser is used (default option) it is just necessary to run yaim once (i.e. it is not necessary anymore to first configure the creamCE and then the BLparser). More information in: http://grid.pd.infn.it/cream/field.php?n=Main.CREAMAndBlparserConfiguration

Known issues

See: http://grid.pd.infn.it/cream/field.php?n=Main.KnownIssues

Dependencies

The following internal patch has been included in this metapackage release:

• patch #5011: Support for Terena/FNAL certificate chain verification in gLExec and CREAM-CE with gLExec

  This fixes a problem of verifying CAs that issue

  • user certificates
  • using sub CAs
  • have a path length constraint set in the sub CA.
  • Passing a full certificate chain through gLExec (used by the CREAM CE)
  • At least two proxy delegations in the certificate chain This is the case for the FNAL (SLCS) CA, Terena eScience Personal and Terena eScience SSL CAs.