Difference between revisions of "GridRootCertificates"

From GridPP Wiki
Jump to: navigation, search
Line 4: Line 4:
 
== Introduction ==
 
== Introduction ==
  
The Grid uses a number of Root Certificates which may not appear in a browser certificate bundle by default; if these root certificates are not added to the browser store (or keychain in the case of macOS), exceptions have to be made when accessing associated HTPS sites. The intention of this page is to gather links to commonly used CAs and give links to their root certificate information.
+
The Grid uses a number of Root Certificates which may not appear in a browser certificate bundle by default; if these root certificates are not added to the browser store (or keychain in the case of macOS), exceptions have to be made when accessing associated HTTPS sites. Using the TACAR (Trusted Academic Certification Authority Repository) website as a base, below is a (probably incomplete) list of services with the CA needed for each. In each case the name of the service is given along with the appropriate CA and a note as to whether you might expect it to be bundled with a web browser.
  
== UK CA ==
+
{| class="wikitable"
 
+
|-
http://www.ngs.ac.uk/ukca/certificates/cacerts.html
+
! scope="col"| Service
 
+
! scope="col"| CA
== CERN ==
+
! scope="col"| Bundled
 
+
|-
https://cafiles.cern.ch/cafiles/certificates/Grid.aspx
+
| https://pakiti.egi.eu
 
+
| CESNET_CA_3
== DESY ==
+
| No
 
+
|}
https://www-ca.desy.de/certificates/index_eng.html
+
 
+
== CESNET ==
+
 
+
Used by: https://pakiti.egi.eu
+
 
+
https://pki.cesnet.cz/en/ch-cca-crt-crl.html
+

Revision as of 17:20, 5 December 2017

Root Certificates used on the Grid

Introduction

The Grid uses a number of Root Certificates which may not appear in a browser certificate bundle by default; if these root certificates are not added to the browser store (or keychain in the case of macOS), exceptions have to be made when accessing associated HTTPS sites. Using the TACAR (Trusted Academic Certification Authority Repository) website as a base, below is a (probably incomplete) list of services with the CA needed for each. In each case the name of the service is given along with the appropriate CA and a note as to whether you might expect it to be bundled with a web browser.

Service CA Bundled
https://pakiti.egi.eu CESNET_CA_3 No