[Gt-eos] Fwd: New globus-gssapi-gsi version default to TLSv1.2

[andrea]

Hi Paul


Il 21.09.18 15:58, Maarten Litmaath ha scritto:
> CC FTS manager Andrea...
>
> On 09/21/18 15:41, Paul Millar wrote:
>> On 21/09/18 15:33, Maarten Litmaath wrote:
>>> Hi all,
>>> do you have comments on this matter?
>>
>> Is the "pilot" FTS instance finding SRM storage sites that are not 
>> supporting TLS v1.2 because the version of globus-gssapi-gsi was 
>> updated on that (those) machine(s)?
yes the new package coming from EPEL-testing was installed on 2 of our 
FTS pilot nodes
>>
>> Does this problem affect only FTS, or are clients installed on the WN 
>> also affected?
anyone using gfal + srm/gridftp will be affected ( if the the server is 
not configured with tls 1.2)
>>
>> Has anyone tested a machine with this against any dCache instances?
i just tried INP3 and it looks ok

cheers
Andrea

>>
>> For me, the last question is the most pressing.
>>
>> If the answer is "no" then how can we change this, so dCache 
>> instances are being tested?
>>
>> Cheers,
>>
>> Paul.
>