Latest Release‎ > ‎

Testing

Here are some steps to test your GridShib-CA installation. Note that it's normal to get some browser warnings/questions about trusting certificates, both for web sites and Java Web Start applications, as you go through the process. If you have any problems testing, please see Troubleshooting.

  1. From your build directory, run the post-install tests. You'll need to do this as root or the user under which Apache runs, so that the tests can read all the appropriate. This should go through the process of issuing a certificate and test everything but your Shibboleth configuration. Note that this will actually issue a certificate from your CA, outputting the certificate and generated private key to standard out.

    # make test-post-install
  2. Fire up your favorite browser and point it at https://hostname/gridshib-ca-2.0.0 replacing hostname with the name of the host on which you installed the GridShib-CA. Be sure to use 'https'. If this didn't work then something is fundamentally broken. Either Apache isn't installed right or a 404 error indicates your installation didn't put the files in the right place and you need to go review the configure options, the most likely culprit being --with-apache-docroot.

  3. Select one of the Sign-On methods: Shibboleth or OpenId and proceed to authenticate.

  4. When you are returned to the debug page, at the bottom of the page you should see a session Id and set of variables.

  5. You should now should be able to click on the "Java Web Start" button. Wait a few seconds and the Java web start client should launch, downloading a credential for you. After it completes you can close it.
  6. On the command line, you should now be able to see your grid credential by running grid-proxy-info. For example:

    % grid-proxy-info
    subject : /C=US/O=NCSA-TEST/OU=User/CN=vwelch@openidp.org
    issuer : /C=US/O=NCSA-TEST/OU=GridShib/CN=SP-CA
    identity : /C=US/O=NCSA-TEST/OU=User/CN=vwelch@openidp.org
    type : end entity credential
    strength : 1024 bits
    path : /tmp/x509up_u501
    timeleft : 11:58:12
  7. If you got this far you are good to go.

Comments