EGEE-NE and Benelux Tutorial Certification Authority

Production CA

DutchDemo CA

Tutorial CA
Upload request
Retrieve

Root certificate
CRL

Tutor Interface

Test-Low CA
(discontinued)

NL e-Infra Zero

Documentation

Links

EGEE-NE and Benelux Tutorial Worthless CA

This tutorial CA is only used for Grid tutorials organised by the EGEE Northern and Benelux Federations and the Northern Europe ROC. Certificates issued by this CA (only to users) are recognised on a small subset of systems, and then onoly during the tutorials. It has no policy other than that the tutors can issue a certificate to anyone they like.
If you are looking for a production-quality certificate from a CA that is accredited to the IGTF, please contact your local Certification Authority:

Generating your request

Your tutorial handout will tell you how to generate the request, but as far as this CA is concerned, you can generate your certificate request any way your like, as long as you can submit it in text format to the validation interface. The easiest way is actually a single "OpenSSL" command (OpenSSL being the most popular tool for manipulating these things called "X.509 certificates"). Only the common name in your subject name will be used by the CA and it must be unique, so using your full name and any initials you have will help ensure uniqueness.

Run the following commands, replacing "Pietje Puk 42" with your own name:

mkdir $HOME/.globus
openssl req -subj "/CN=Pietje Puk 42" -out $HOME/.globus/userrequest.pem -keyout $HOME/.globus/userkey.pem -new

Then go to the submission web form and post your "userrequest.pem" file or its contents there. You will see a confirmation page when the upload has succeeded. After a successful upload, ask your tutor to validate your request. As soon as the tutor has done that, you can download your certificate in text format and store it, as usercert.pem, next to your private key.

Download your certificate

Look up your name in the list of valid certificates here.

For Tutors

All tutors must have a valid certifite from an IGTF accredited CA, and must be registred with the EGEE-NE and Benelux tutorial CA to act as tutors. Send the subject name of your certificate, with details of the upcoming tutorial, to the DutchGrid CA to register.
Once registred, you have access to the RA interface and you can:

EGEE-NE and Benelux Worthless Tutorial CA Essential Data
Distinguished Name (RFC2253)	`CN=Worthless EGEE Northern and Benelux Tutorial CA 1,OU=Training Services,DC=egee-ne,DC=org`
Hash	8c13c962
SHA1 Finger Print	2E:43:30:01:B6:1F:01:01:89:1C:05:95:43:B5:AD:AF:85:8C:10:42
MD5 Finger Print	1A:FF:4B:65:42:F5:8C:CA:60:0F:1A:F7:4D:E2:C8:3D
Subject Namespaces (RFC2253)	`/DC=org/DC=egee-ne/O=Training Services/OU=users/*`
signing policy file	8c13c962.signing_policy
Root certificate and CRL	8c13c962.0 and 8c13c962.r0
Installation packages	ca_egee-ne-benelux-tutorial-2.0-1.noarch.rpm ca_egee-ne-benelux-tutorial-2.0.tar.gz
Notices	Default validity period 14 days NOT rekeyable Requires participation in a EGEE-NE or Benelux organised tutorial Requires confirmation by a tutor