[Gt-eos] New globus-gssapi-gsi version default to TLSv1.2

Maarten Litmaath Maarten.Litmaath at cern.ch
Tue Sep 25 19:52:09 CEST 2018


Hi Brian,

> I've contacted all the OSG sites that Andrea pointed out as still running bestman2.  They are all acutely aware that they need to retire the service.  All three are working on the subject and, I suspect, will have retired them in a month or two.

Good!

> For CERN's instance - please contact FNAL.  I think they may have some custom patches that enables TLS v1.2 in order to pass the DOE scans.  I don't have the technical details, but I believe Burt Holzman might.

We will follow up with FNAL, thanks!



More information about the discuss mailing list