| -----BEGIN PGP SIGNED MESSAGE----- |
| Hash: SHA1 |
| |
| [ Replacement INFN signing policy, May 2008 (mccreary) ] |
| |
| Retrieved from |
| <https://dist.eugridpma.info/distribution/igtf/current/accredited/tgz/> |
| ca_INFN-CA-2006-1.28.tar.gz |
| |
| on 01May09. Web server presented certificate w/ subject: |
| |
| CN = dist.eugridpma.info |
| O = NIKHEF |
| OU = PDP |
| Serial Num = 01:00:00:00:00:01:10:E4:53:B7:A5 |
| |
| from authority: |
| |
| CN = Cybertrust Educational CA |
| O = Cybertrust |
| OU = Educational CA |
| |
| Valid from 21Feb07 until 21Feb2010 |
| |
| Fingerprints: |
| SHA1 7D:EF:99:28:66:AB:46:91:AE:0C:05:59:8A:F8:69:60:0F:E0:E0:24 |
| MD5 5D:AE:44:D1:14:F6:E8:8A:BB:EE:AD:3F:7A:1F:13:6D |
| |
| Updated 2f3fadf6.signing_policy: |
| dubfwe:~/repo/security/certificates mccreary$ diff 2f3fadf6.signing_policy ../new/ca_INFN-CA-2006-1.28/2f3fadf6.signing_policy |
| 1,3c1,4 |
| < access_id_CA X509 '/C=IT/O=INFN/CN=INFN CA' |
| < pos_rights globus CA:sign |
| < cond_subjects globus '"/C=IT/O=INFN/OU=Personal Certificate/L=*/CN=*"' '"/C=IT/O=INFN/OU=Host/L=*/CN=*"' '"/C=IT/O=INFN/OU=Service/L=*/CN=*"' |
| - --- |
| > # @(#)$Id: 2f3fadf6.signing_policy,v 1.1 2006/10/10 10:13:18 pmacvsdg Exp $ |
| > access_id_CA X509 '/C=IT/O=INFN/CN=INFN CA' |
| > pos_rights globus CA:sign |
| > cond_subjects globus '"/C=it/O=INFN/*" "/C=IT/O=INFN/*"' |
| |
| Verified other files have no significant differences |
| 2f3fadf6.0 |
| openssl x509 -subject -fingerprint -sha1 -noout -in 2f3fadf6.0 |
| subject= /C=IT/O=INFN/CN=INFN CA |
| SHA1 Fingerprint=7D:17:44:C4:C9:1F:01:A8:B3:1C:81:E1:FF:8D:D8:91:B4:E1:5C:71 |
| MD5 Fingerprint=0A:D8:F4:7E:9E:39:6B:85:AE:68:FD:E5:8E:EA:6D:1B |
| |
| 2f3fadf6.crl_url |
| dubfwe:~/repo/security/certificates mccreary$ diff 2f3fadf6.crl_url ../new/ca_INFN-CA-2006-1.28/2f3fadf6.crl_url |
| 1c1 |
| < http://security.fi.infn.it/CA/INFNCA_crl.pem |
| - --- |
| > http://security.fi.infn.it/CA/INFNCA_crl.der |
| -----BEGIN PGP SIGNATURE----- |
| Version: GnuPG v1.4.7 (Darwin) |
| |
| iD8DBQFJ+2l4YjEf42hR7yYRAkFuAKCX3S+Sng6Axxd/t5FQVG17B902qACgkaj3 |
| Gt5Pv1Gq9NGw/0RbJfT1OnU= |
| =Fgz2 |
| -----END PGP SIGNATURE----- |