Descritpion:
MyProxy plugin is used to send a credential to a MyProxy Server. The credential can be retrieved later by an application (eg: webservice or a web application). So MyProxy Server acts as a mediator in between user and gridresources/ application that can talk to Grid Resources. So we have sending credential process only, there is no retrieval process.
Sending Credential to a MyProxy Server is two phase activity.
- GridProxyInit: Creating a proxy certificate from user certificates.
- MyProxyInit: Creating a credential from the proxy certificate, and send it to the MyProxy Server.
In order to do the above two phases, user need to provide CA root certificates, and MyProxy Server CA root certficates in a directory , and globus-java api can pick these certificates from this directory.
In linux environment by default globus-java api looks into /etc/grid-security/certificates . But we can configure it to any other directory also. You can see it in CredentialCreator class constructor, currently the directory is configured for .taverna/grid-certficates directory, and proxyfile will be stored in ./taverna/proxyfile. These things can be changed
suggestions required. Can we leave this to user to fill the directory, or can we provide some CA Root certificates ie what Globus does.
GridProxyInit:
User need to select pk12 or pem format option, depending on their user certificate format.
If certificates are in pem format, user need to specify path to xxxx.pem, xxxx.pem files. If certificates are in pk12 format, user need to specify path to xxxx.p12 file only.
MyProxyInit:
MyProxy credential will be created from .taverna/proxyfile . And it will be send to MyProxy Server.
