3. Install your Personal Certificate in the GILDA UI
Now install in the UI
the exported certificate (e.g. file certificate.p12).
Perform the following steps outside the UI:
- Install the exported certificate certificate.p12 on a
network-accessible server host.
You should be able to download the certificate from the
server by secure copy (SSH protocol) or file
transfer (FTP protocol) or web access (HTTP protocol).
Perform the following steps inside the UI:
- Login as user gildauser.
Password: gildauser
- Create in your home directory a subdirectory .globus and go to
that directory.
mkdir .globus
cd .globus
- Download the certificate certificate.p12
from the server host by one of the
following commands:
scp host:/path/certificate.p12 . (secure copy)
ftp host (file transfer)
wget http://host/path/certificate.p12 (web access)
(Afterwards erase your certificate from the server.)
- Convert your certificate and private key from the PKCS12 format to the
PEM format:
openssl pkcs12 -clcerts -nokeys -in certificate.p12 -out usercert.pem
openssl pkcs12 -nocerts -in certificate.p12 -out userkey.pem
- Hide your private key from other users:
chmod go-rwx userkey.pem
|