Application Notes : FOXMAN-UN - DIRAC Certificates Recreation : Certificates to update
Hitachi Energy
Certificates to update
The following certificates have an expiry date.
 
• The DIRAC/FOXMAN-UN certificates are located under
 
/etc/pki/dirac
 
Example:
[dirac@nmssrv ~]$ ls -l /etc/pki/dirac/*.crt
-rw-r-----. 1 dirac dirac 1281 Apr 22 08:14 /etc/pki/dirac/cli.crt
-rw-r-----. 1 dirac dirac 1415 Apr 22 08:14 /etc/pki/dirac/diracCA.crt
-rw-r-----. 1 dirac dirac 1281 Apr 22 08:14 /etc/pki/dirac/nem.crt
-rw-r-----. 1 dirac dirac 1415 Apr 22 08:14 /etc/pki/dirac/server.crt
 
NEM related certificates are also copied under /opt/nem/etc/enpsec/ (these files are created/copied when you install DIRAC on the system):
[dirac@nmssrv ~]$ ll /opt/nem/etc/enpsec/
-rw-r--r--. 1 nemadm nem 1415 Apr 28 18:32 diracCA.crt
-rw-r--r--. 1 nemadm nem 1281 Apr 28 18:32 nem.crt
-rw-r--r--. 1 nemadm nem 2509 Apr 28 18:32 nem.p12
-rw-r--r--. 1 nemadm nem 1708 Apr 28 18:32 nem.pem
 
Verify the certificates validity (all of them will have the same expiry date as per installation). For cli.crt for example:
 
[dirac@nmssrv ~]$ openssl x509 -noout -dates -in /etc/pki/dirac/cli.crt
notBefore=Apr 22 06:14:53 2021 GMT
notAfter=Apr 20 06:14:53 2031 GMT