ROC manager update
*************************
ROC France observation: CERN Trusted Certification Authority published old CRL twice during the week. This was due to a CERN CA web site update. Such a problem is quite tricky as failures come from everywhere (SAM test failed, some users complain, Atlas DDM production went wrong). In order to find the problem out, you have to cross those data. So, perhaps:
1. It would be interesting to monitor CRL validity of official CAs, and keep its history
2. Ask CA adminitrator to check the CRL validity after each update.
Reminder: When a SAM critical test is going wrong, this is obviously good to quickly solve the problem, but please don t forget to announce asap the problem to prevent people from wasting time with misleading alarms.
Ticket status
***************
https://gus.fzk.de/download/escalationreports/roc/html/20080526_EscalationReport_ROCs.html