{"action":"created","issue":{"url":"https://api.github.com/repos/ahelsing/tickettest2/issues/59","labels_url":"https://api.github.com/repos/ahelsing/tickettest2/issues/59/labels{/name}","comments_url":"https://api.github.com/repos/ahelsing/tickettest2/issues/59/comments","events_url":"https://api.github.com/repos/ahelsing/tickettest2/issues/59/events","html_url":"https://github.com/ahelsing/tickettest2/issues/59","id":76001022,"number":59,"title":"gcf clearinghouse certificate not marked as certificate authority (CA)","user":{"login":"tcmitchell","id":340136,"avatar_url":"https://avatars.githubusercontent.com/u/340136?v=3","gravatar_id":"","url":"https://api.github.com/users/tcmitchell","html_url":"https://github.com/tcmitchell","followers_url":"https://api.github.com/users/tcmitchell/followers","following_url":"https://api.github.com/users/tcmitchell/following{/other_user}","gists_url":"https://api.github.com/users/tcmitchell/gists{/gist_id}","starred_url":"https://api.github.com/users/tcmitchell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tcmitchell/subscriptions","organizations_url":"https://api.github.com/users/tcmitchell/orgs","repos_url":"https://api.github.com/users/tcmitchell/repos","events_url":"https://api.github.com/users/tcmitchell/events{/privacy}","received_events_url":"https://api.github.com/users/tcmitchell/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ahelsing/tickettest2/labels/gcf","name":"gcf","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-13T14:20:41Z","updated_at":"2015-05-13T14:21:17Z","closed_at":null,"body":"When `src/gen-certs.py` creates the gcf clearinghouse certificate it does not mark it as a CA, although it is used as a CA certificate to sign other certificates (AM and alice).\r\n\r\nChange `src/gen-certs.py` to mark ch-cert.pem as a CA.\n\n _Imported from trac ticket [#59](http://trac.gpolab.bbn.com/gcf/ticket/59),  created by tmitchel on 08-16-2011 at 17:47, last modified: 08-16-2011 at 17:49_\n   CCing: ahelsing@..."},"comment":{"url":"https://api.github.com/repos/ahelsing/tickettest2/issues/comments/101683413","html_url":"https://github.com/ahelsing/tickettest2/issues/59#issuecomment-101683413","issue_url":"https://api.github.com/repos/ahelsing/tickettest2/issues/59","id":101683413,"user":{"login":"tcmitchell","id":340136,"avatar_url":"https://avatars.githubusercontent.com/u/340136?v=3","gravatar_id":"","url":"https://api.github.com/users/tcmitchell","html_url":"https://github.com/tcmitchell","followers_url":"https://api.github.com/users/tcmitchell/followers","following_url":"https://api.github.com/users/tcmitchell/following{/other_user}","gists_url":"https://api.github.com/users/tcmitchell/gists{/gist_id}","starred_url":"https://api.github.com/users/tcmitchell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tcmitchell/subscriptions","organizations_url":"https://api.github.com/users/tcmitchell/orgs","repos_url":"https://api.github.com/users/tcmitchell/repos","events_url":"https://api.github.com/users/tcmitchell/events{/privacy}","received_events_url":"https://api.github.com/users/tcmitchell/received_events","type":"User","site_admin":false},"created_at":"2015-05-13T14:21:17Z","updated_at":"2015-05-13T14:21:17Z","body":"Fixed `src/gen-certs.py` to set the certificate authority (ca) argument to true when generating the ch certificate. The new ch certificate is now marked as a CA.\r\n\r\nFor example:\r\n```\r\n\r\n$ openssl x509 -noout -text -in ~/.gcf/ch-cert.pem \r\nCertificate:\r\n    Data:\r\nVersion: 3 (0x2)\r\nSerial Number: 3 (0x3)\r\nSignature Algorithm: md5WithRSAEncryption\r\nIssuer: CN=geni//gpo//gcf.authority.sa\r\nValidity\r\nNot Before: Aug 16 21:15:14 2011 GMT\r\nNot After : Aug 14 21:15:14 2016 GMT\r\nSubject: CN=geni//gpo//gcf.authority.sa\r\nSubject Public Key Info:\r\nPublic Key Algorithm: rsaEncryption\r\nRSA Public Key: (1024 bit)\r\nModulus (1024 bit):\r\n00:af:06:72:59:be:09:7b:35:84:65:ce:f1:50:c7:\r\n0b:2c:ff:1f:a2:ff:b2:7b:c7:98:53:33:dc:43:e8:\r\nf9:96:48:24:e0:ab:e1:30:90:9a:04:52:cc:c1:62:\r\na3:20:a1:12:fc:b7:23:e9:51:13:08:fe:98:11:29:\r\n2e:94:9c:79:d0:ff:65:af:48:82:ca:82:63:21:8f:\r\n87:8f:ba:5f:a8:01:e5:b5:a2:e2:2e:d8:f9:59:29:\r\ne9:a2:66:1e:f3:34:ed:3b:21:12:56:35:a9:03:a4:\r\na7:32:c7:5b:03:c4:4a:c8:47:20:00:6f:66:df:12:\r\nfa:e3:7c:0a:08:b9:c3:4b:39\r\nExponent: 65537 (0x10001)\r\nX509v3 extensions:\r\nX509v3 Basic Constraints: critical\r\nCA:TRUE\r\nX509v3 Subject Alternative Name: \r\nURI:urn:publicid:IDN+geni:gpo:gcf+authority+sa\r\n    Signature Algorithm: md5WithRSAEncryption\r\n71:a9:7a:9c:00:ec:22:cc:3a:42:68:9f:1a:3c:f4:a8:19:3e:\r\n96:15:5d:c0:37:c7:ad:e4:cd:9d:f1:0c:6a:db:36:a7:c8:19:\r\n33:64:d4:0f:e4:c7:a5:73:9c:5e:f5:a7:ba:32:68:dd:ed:9d:\r\n32:8a:c7:2a:b8:c8:2c:97:4b:6b:2c:44:72:d9:74:7b:15:00:\r\n5d:e3:7a:c9:63:d1:18:6d:24:ac:a4:55:ee:f7:73:ff:ba:17:\r\nd0:56:81:81:d8:03:49:9f:7f:3b:b9:3a:07:5e:d4:58:f1:dc:\r\n3a:03:7c:bb:07:86:34:0a:58:d4:e8:71:1d:95:e9:1a:33:cf:\r\ne8:ff\r\n```\r\n\n\n_Trac comment by tmitchel (github user: tcmitchell) on 08-16-2011 at 17:49_\n"}}