(GT version: 4.0.5)

Creating a hostcert request for a non fully qualified hostname gives a
sentence that the hostname is not fully qualified but does not abort
regardless what i enter although it says that it's aborting.
So if one does not look closely everything looks fine.
Signing this hostcert request however fails.
(Signing a hostcert request with a FQDN hostname works fine).

I guess the correct behavior would be to really abort or to
give a stronger warning.

We ran into that on lucky0 of the lucky cluster in MCS.
The command hostname here returns only lucky0, so calling
"grid-cert-request -host `hostname`" as mentioned in the
Quickstart guide causes this problem.

Here's what happens, reproduced on my laptop:

Create the hostcert request:
############################

lappi2:/etc/grid-security root# grid-cert-request -host lappi2    
The hostname lappi2 does not appear to be fully qualified.
Do you wish to continue? [n] 
Aborting
Generating a 1024 bit RSA private key
...++++++
...................................................................................++++++
writing new private key to '/etc/grid-security/hostkey.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Level 0 Organization [Grid]:Level 0 Organizational Unit [GlobusTest]:Level 1
Organizational Unit [simpleCA-lappi2.local]:Name (e.g., John M. Smith) []:

A private host key and a certificate request has been generated
with the subject:

/O=Grid/OU=GlobusTest/OU=simpleCA-lappi2.local

----------------------------------------------------------

The private key is stored in /etc/grid-security/hostkey.pem
The request is stored in /etc/grid-security/hostcert_request.pem

Please e-mail the request to the Globus Simple CA feller@mcs.anl.gov
You may use a command similar to the following:

 cat /etc/grid-security/hostcert_request.pem | mail feller@mcs.anl.gov

Only use the above if this machine can send AND receive e-mail. if not, please
mail using some other method.

Your certificate will be mailed to you within two working days.
If you receive no response, contact Globus Simple CA at feller@mcs.anl.gov


Sign the hostcert request:
##########################

lappi2:~ martinfeller$ grid-ca-sign \
            -in /etc/grid-security/hostcert_request.pem \
            -out hostcert.pem

To sign the request
please enter the password for the CA key:

ERROR: Failed to find signed cert in CA cert store with subject:
       /O=Grid/OU=GlobusTest/OU=simpleCA-lappi2.local