[Gt-eos] Fwd: New globus-gssapi-gsi version default to TLSv1.2

[Brian Bockelman]

Hi Andrea,

To be clear - Bestman is past end-of-support (security or otherwise).  It might be that any remaining sites might simply lose the ability to transfer as things roll out.

Now, that's easy to say but hard to actually pull off!  Who are the sites affected so we can better reach out and help smooth the transition?

Brian

> On Sep 21, 2018, at 9:04 AM, andrea <andrea.manzi at cern.ch> wrote:
> 
> Hi Paul
> 
> 
> Il 21.09.18 15:58, Maarten Litmaath ha scritto:
>> CC FTS manager Andrea...
>> 
>> On 09/21/18 15:41, Paul Millar wrote:
>>> On 21/09/18 15:33, Maarten Litmaath wrote:
>>>> Hi all,
>>>> do you have comments on this matter?
>>> 
>>> Is the "pilot" FTS instance finding SRM storage sites that are not supporting TLS v1.2 because the version of globus-gssapi-gsi was updated on that (those) machine(s)?
> yes the new package coming from EPEL-testing was installed on 2 of our FTS pilot nodes
>>> 
>>> Does this problem affect only FTS, or are clients installed on the WN also affected?
> anyone using gfal + srm/gridftp will be affected ( if the the server is not configured with tls 1.2)
>>> 
>>> Has anyone tested a machine with this against any dCache instances?
> i just tried INP3 and it looks ok
> 
> cheers
> Andrea
> 
>>> 
>>> For me, the last question is the most pressing.
>>> 
>>> If the answer is "no" then how can we change this, so dCache instances are being tested?
>>> 
>>> Cheers,
>>> 
>>> Paul.
>> 
> 
> _______________________________________________
> Gt-eos mailing list
> Gt-eos at mailman.egi.eu
> http://mailman.egi.eu/mailman/listinfo/gt-eos