Based on the OSG announcements, new certificates will not be issued from the OSG CA after 5/31/2018. Assuming a maximum expected certificate lifetime of 13 months, that puts the full retirement date at ~June 30 2019, until which we expect to be able to retrieve and verify current CRLs. Is this correct?
Upon final retirement of the OSG CA, XSEDE should remove the CA from its xsede-ca-certificates bundle.
- Derek
© ACCESS All Rights Reserved.
ACCESS is an advanced computing and data resource supported by the
National Science Foundation
and made possible through these lead institutions and their partners:
Carnegie Mellon University,
University of Colorado Boulder,
University of Illinois at Urbana-Champaign, and
State University of New York at Buffalo .
Hi Derek,
Yes, I agree.
Thanks,
Jim