[Gt-eos] New globus-gssapi-gsi version default to TLSv1.2

[Maarten Litmaath]

Hi all,
Burt provided us with a patched JGlobus and the BeStMan SRM instances
on EOS at CERN are fine since a week.  However, we found quite a number
of other services that do not work with TLS v1.2, presumably due to running
on old versions of Java and/or Globus.  We have prepared a text to be used
in a broadcast across WLCG:

https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes181011#Important_notice_concerning_the

Is anything preventing globus-gssapi-gsi-14.7-2 from being pushed to stable?

________________________________________
From: Maarten Litmaath
Sent: 25 September 2018 19:52
To: bbockelm at cse.unl.edu; End of Support of Globus Toolkit
Cc: Mattias Ellert; Mischa Sallé; wlcg-middleware-officer (Group of people with WLCG MW Officer function)
Subject: Re: [Gt-eos] New globus-gssapi-gsi version default to TLSv1.2

Hi Brian,

> I've contacted all the OSG sites that Andrea pointed out as still running bestman2.  They are all acutely aware that they need to retire the service.  All three are working on the subject and, I suspect, will have retired them in a month or two.

Good!

> For CERN's instance - please contact FNAL.  I think they may have some custom patches that enables TLS v1.2 in order to pass the DOE scans.  I don't have the technical details, but I believe Burt Holzman might.

We will follow up with FNAL, thanks!