[MacPorts] #41532: igtf-bundle @1.55: new submission

MacPorts noreply at macports.org
Tue Nov 26 07:55:05 PST 2013


#41532: igtf-bundle @1.55: new submission
------------------------------+----------------------
  Reporter:  Peter.Danecek@…  |      Owner:  ram@…
      Type:  submission       |     Status:  assigned
  Priority:  Normal           |  Milestone:
 Component:  ports            |    Version:
Resolution:                   |   Keywords:
      Port:  igtf-bundle      |
------------------------------+----------------------

Comment (by Peter.Danecek@…):

 Replying to [comment:15 dennisvd@…]:
 > Replying to [comment:11 ram@…]:
 > > I know that the usual place for certificates in `/etc/grid-
 security/certificates` but as we're installing in prefix it seems like we
 should just install to a path that is searched?
 > There is some software (such as VOMS) that defaults to /etc/grid-
 security/certificates. It's been common practice with the European grid
 projects. Usually the location can be overridden with an environment
 variable, but are there any profound objections against having the
 certificates in that place?

 I understand, that there are tools which expect to have certificates in
 `/etc/grid-security/certificates`. But are there any tools expecting it to
 be in `${prefix}/etc/grid-security`.  If yes we can of cause put
 certificates in that location, if not there is probably no point in doing
 so. I personally, do not know of any (but have limited experience). The
 Globus toolkit for Macports currently looks up in `/etc/grid-security` and
 `/opt/local/share/certificates` and all software using GSI authentication
 does as we.

 > Also, the IGTF relies heavily on CRLs, and the fetch-crl tool places
 them next to the certificate files. Aren't there also objections against
 having such variable data in .../share/...?

 Okay!
 Should, as a general rule, variable data not go into `.../var/...` then? I
 was assuming that is what is `${prefix}/var/cache/fetch-crl` for.

-- 
Ticket URL: <https://trac.macports.org/ticket/41532#comment:16>
MacPorts <http://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list