maindavfs2 - Support: sr #108740, Cerificate problem

 
 

sr #108740: Cerificate problem

Submitter:  None
Submitted:  Wed 04 Feb 2015 10:46:18 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  In Progress
Privacy:  Public Assigned to:  _71007
Originator Email:  -email is unavailable- Open/Closed:  Closed
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 12 Feb 2015 07:21:02 PM UTC, comment #4: 

davfs2 does no create any log files of it's own. It uses the syslog facility of your system (i.e. functions of the C-library).
Debug messages are marked with facility LOG_DAEMON and priority LOG_DEBUG.

Where this log messages end up is not at the discretion of davfs2. It depends on your system and how it is configured. I can't help there. Traditionally you find log files in /var/log on Gnu/Linux-Systems. Messages of davfs2 should be prefixed with a time stamp and "mount.davfs".

Werner

- <_71007>
Wed 11 Feb 2015 01:46:57 PM UTC, comment #3: 

Sorry for a delayed reply.
So far I was trying to debug davfs2, but debug options have no effect, I see no debug messages in the terminal and I don't have any new log files. Where the log files are located?
Best regards,
Andrii

Anonymous
Fri 06 Feb 2015 07:20:13 PM UTC, comment #2: 

"cp: cannot open `XXXX' for reading: Input/output error"
This looks like something is going wrong with HTTP GET requests.

Please use option 'debug most' in your davfs2.conf file. You will get a lot of debug messages from mount.davfs in your log files. Most interesting are the HTTP headers of GET requests and replies.

You may also send the log messages to this list.

Werner

P.S.: Please always answer on this list and not by email, to keep all of one thread in one place.

- <_71007>
Wed 04 Feb 2015 07:54:07 PM UTC, comment #1: 

"I've checked the certificate twice and i'm sure the password is correct and so on, but I still have this error."
How did you check? You should use the command line tools of the TLS-library that is used by davfs2.

Certificate handling in davfs2 is done by the Neon-library which in turn uses either GnuTLS or OpenSSL, depending on how davfs2 is build. If you don't know which TLS-lirary is used the following command will show:

objdump -p /path/to/mount.davfs | grep NEEDED

/path/to/mount.davfs must be the absolute file name of the mount.davfs programm, starting with "/".

The man pages of either certtool (GnuTLS) or pkcs12 (OpenSSL) will show how to read the client certificate.

Additionally you may set options 'debug ssl' and 'debug secrets' in your davfs2.conf file and search your log files for debug messages from mount.davfs.

Cheers
Werner



- <_71007>
Wed 04 Feb 2015 10:46:18 AM UTC, original submission:  

Dear davfs2 team,
I try to use davfs to acces a data with Grid certificate.
However, I have some strange error from davfs.
I try to do
[root@XXX ~]#  mount.davfs https://YYY:2880/ ./a -o conf=/root/conf

where /root/conf is

use_locks 0
#ask_auth 0
#debug 1
clientcert /root/.globus/fordav.p12


But finaly I have


Please enter the password to decrypt client
certificate /root/.globus/fordav.p12.
  Password: 
mount.davfs: can't decrypt client certificate /root/.globus/fordav.p12

I've checked the certificate twice and i'm sure the password is correct and so on, but I still have this error.
Could you, please, help me to fix this issue? If that is needed I can provide more information or try to debug davfs.

Best regards,
Andrii









Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-04-15 _71007 Open/ClosedOpen Closed
    2015-02-04 _71007 StatusNone In Progress
        Assigned toNone _71007

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code