Bug 5336

Summary: SAML Tools issue "draft proxy" certs
Product: GridShib Reporter: Tom Scavo <trscavo@gmail.com>
Component: SAML/Binding ToolsAssignee: Tom Scavo <trscavo@gmail.com>
Status: RESOLVED FIXED    
Severity: normal CC: gridshib-dev@globus.org, kettimut@mcs.anl.gov, tfreeman@mcs.anl.gov, vwelch@uiuc.edu
Priority: P3    
Version: 0.1.4   
Target Milestone: beta   
Hardware: All   
OS: All   
URL: http://www.globus.org/mail_archive/gt-dev/2007/05/msg00042.html

Description From 2007-05-30 13:33:57 
GridShib SAML Tools v0.1.4 and below issue "draft proxy" certificates instead
of "RFC proxy" certificates.  This can be traced to the use of constant

GSIConstants.GSI_3_IMPERSONATION_PROXY

in org.globus.gridshib.util.GSIUtil.  See the above cited mailing list thread
for detailed discussion.
------- Comment #1 From 2007-05-30 13:36:19 ------- 
This is easy to fix (just change GSIConstants.GSI_3_IMPERSONATION_PROXY to
GSIConstants.GSI_4_IMPERSONATION_PROXY in GSIUtil) but is this advisable?  Does
this break some unforeseen use of SAML Tools-issued proxy certificates?
------- Comment #2 From 2007-05-30 13:49:22 ------- 
>This is easy to fix (just change GSIConstants.GSI_3_IMPERSONATION_PROXY to
>GSIConstants.GSI_4_IMPERSONATION_PROXY in GSIUtil) but is this advisable?  Does
>this break some unforeseen use of SAML Tools-issued proxy certificates?

Any version of GT > 4.0 should accept the new proxy certificates. This should
include any community of interest for GS.
------- Comment #3 From 2007-05-30 14:06:50 ------- 
Okay, a patched version of GSIUtil has been committed to CVS HEAD.  This patch
will be bundled with the next official release of GridShib SAML Tools.