Error while creating VOMS proxy

[abmargb]

Hello all

I am trying do create a VOMS Proxy using jLite, however I get some
errors during the SSL handshake. Here's my code:

if (proxy == null || proxy.getTimeLeft() <= 6 * 60 * 60) {
try {
if (proxy != null) {
session.destroyProxy();
}
proxy = session.createProxy(getProperties().getProperty
(EGEEHandlerConstants.VO_NAME), 12 * 60 * 60);
session.delegateProxy(EGEEHandlerConstants.MY_GLITE_ID);
} catch (Throwable e) {
proxy = null;
session = null;
throw new BackendException("Proxy initialization failed");
}
}

And the error stacktrace follows:

2009-09-16 23:16:58,046 - Parsing vomses dir:/usr/local/gateway/
glite_files/vomses
2009-09-16 23:16:58,046 - Parsing vomses file: /usr/local/gateway/
glite_files/vomses/prod.vo.eu-eela.eu-voms.eela.ufrj.br
2009-09-16 23:16:58,046 - Parsing vomses file: /usr/local/gateway/
glite_files/vomses/prod.vo.eu-eela.eu-voms-eela.ceta-ciemat.es
2009-09-16 23:16:58,046 - Parsing vomses file: /usr/local/gateway/
glite_files/vomses/oper.vo.eu-eela.eu-voms.eela.ufrj.br
2009-09-16 23:16:58,046 - Parsing vomses file: /usr/local/gateway/
glite_files/vomses/oper.vo.eu-eela.eu-voms-eela.ceta-ciemat.es
2009-09-16 23:16:58,047 - Looking for pem certificates in (/usr/local/
gateway/glite_files/mycertificate/usercert.pem,/usr/local/gateway/
glite_files/mycertificate/userkey.pem)
2009-09-16 23:16:58,048 - File is: userkey.pem
2009-09-16 23:16:58,048 - is encrypted ? true
2009-09-16 23:16:58,048 - is password ? cert-pass
2009-09-16 23:16:58,048 - is password null ? false
2009-09-16 23:16:58,332 - Credentials loaded succesfully.
2009-09-16 23:16:58,332 - VOMS for VO prod.vo.eu-eela.eu:
voms.eela.ufrj.br:15003
2009-09-16 23:16:58,332 - Contacting server [vo=prod.vo.eu-
eela.eu,host=voms.eela.ufrj.br,port=15003,hostDN=/C=BR/O=ICPEDU/O=UFF
BrGrid CA/O=UFRJ/OU=IF/CN=host/voms.eela.ufrj.br,globusVersion=null]
2009-09-16 23:16:58,333 - hostDN:/C=BR/O=ICPEDU/O=UFF BrGrid CA/O=UFRJ/
OU=IF/CN=host/voms.eela.ufrj.br
2009-09-16 23:16:58,432 - Handshake start
2009-09-16 23:16:58,433 - enter iniSecContext
2009-09-16 23:16:58,436 - Loading certificates from /usr/local/gateway/
glite_files/certs/ca directory.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/2418a3f3.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/c48c63f3.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/e36e7a72.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/ce33db76.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/5e5501f3.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/1c3f2ca8.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/16da7552.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/cf4ba8c8.0 is up-to-date.
2009-09-16 23:16:58,437 - Certificate /usr/local/gateway/glite_files/
certs/ca/3f0f4285.0 is up-to-date.
2009-09-16 23:16:58,438 - Certificate /usr/local/gateway/glite_files/
certs/ca/f2e89fe3.0 is up-to-date.
2009-09-16 23:16:58,439 - Certificate /usr/local/gateway/glite_files/
certs/ca/34a509c3.0 is up-to-date.
2009-09-16 23:16:58,439 - Certificate /usr/local/gateway/glite_files/
certs/ca/295adc19.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/d1737728.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/d0c2a341.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/3d5be7bc.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/7b2d086c.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/1691b9ba.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/9dd23746.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/cc800af0.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/722e5071.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/a317c467.0 is up-to-date.
2009-09-16 23:16:58,440 - Certificate /usr/local/gateway/glite_files/
certs/ca/0a2bac92.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/6fee79b0.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/dd4b34ea.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/2a237f16.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/6e3b436b.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/c4435d12.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/5cf9d536.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/8a047de1.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/71a89a47.0 is up-to-date.
2009-09-16 23:16:58,441 - Certificate /usr/local/gateway/glite_files/
certs/ca/1f3834d0.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/8a661490.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/e8d818e6.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/9b59ecad.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/1f0e8352.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/b93d6240.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/1e43b9cc.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/d11f973e.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/9cd75e87.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/99f9f5a3.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/da75f6a8.0 is up-to-date.
2009-09-16 23:16:58,442 - Certificate /usr/local/gateway/glite_files/
certs/ca/742edd45.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/f5ead794.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/0a12b607.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/e5cc84c2.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/e13e0fcf.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/1d879c6c.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/82b36fca.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/ba2f39ca.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/e1fce4e9.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/393f7863.0 is up-to-date.
2009-09-16 23:16:58,443 - Certificate /usr/local/gateway/glite_files/
certs/ca/d0b701c0.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/ff94d436.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/a9082267.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/a02131f7.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/4798da47.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/7b54708e.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/1e12d831.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/163af95c.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/7d0d064a.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/eebc7717.0 is up-to-date.
2009-09-16 23:16:58,444 - Certificate /usr/local/gateway/glite_files/
certs/ca/28a58577.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/684261aa.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/11b4a5a2.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/304cf809.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/d1b603c3.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/afe55e66.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/a87d9192.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/d254cc30.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/468d15b3.0 is up-to-date.
2009-09-16 23:16:58,445 - Certificate /usr/local/gateway/glite_files/
certs/ca/55994d72.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/e8ac4b61.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/47d3d1a0.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/b2771d44.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/2ac09305.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/12a1d8c2.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/3232b9bc.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/617ff41b.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/e72045ce.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/2f3fadf6.0 is up-to-date.
2009-09-16 23:16:58,446 - Certificate /usr/local/gateway/glite_files/
certs/ca/24c3ccde.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/b7bcb7b2.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/9b95bbf2.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/7721d4d3.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/98ef0ee5.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/1149214e.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/e9d08b40.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/709bed08.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/09ff08b7.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/9ff26ea4.0 is up-to-date.
2009-09-16 23:16:58,447 - Certificate /usr/local/gateway/glite_files/
certs/ca/367b75c3.0 is up-to-date.
2009-09-16 23:16:58,448 - Certificate /usr/local/gateway/glite_files/
certs/ca/bffbd7d0.0 is up-to-date.
2009-09-16 23:16:58,448 - Require authz with delegationtrue
2009-09-16 23:16:58,449 - exit initSecContext
2009-09-16 23:16:58,672 - enter iniSecContext
2009-09-16 23:16:58,672 - Require authz with delegationtrue
2009-09-16 23:16:58,672 - put token: 3053
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte array: 74
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte
2009-09-16 23:16:58,672 - read byte array: 2951
2009-09-16 23:16:58,676 - read byte
2009-09-16 23:16:58,676 - read byte
2009-09-16 23:16:58,676 - read byte
2009-09-16 23:16:58,676 - read byte
2009-09-16 23:16:58,676 - read byte
2009-09-16 23:16:58,676 - read byte array: 13
2009-09-16 23:16:58,682 - exit initSecContext
2009-09-16 23:16:58,777 - dipose
2009-09-16 23:16:58,777 - Error getting output stream from underlying
socket:Connection reset
2009-09-16 23:16:58,777 - Connection reset
java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(SocketInputStream.java:168)
at org.globus.gsi.gssapi.SSLUtil.read(SSLUtil.java:42)
at org.globus.gsi.gssapi.net.impl.GSIGssInputStream.readToken
(GSIGssInputStream.java:103)
at org.globus.gsi.gssapi.net.impl.GSIGssInputStream.readHandshakeToken
(GSIGssInputStream.java:59)
at org.globus.gsi.gssapi.net.impl.GSIGssSocket.readToken
(GSIGssSocket.java:65)
at org.globus.gsi.gssapi.net.GssSocket.authenticateClient
(GssSocket.java:115)
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:
145)
at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:
166)
at org.glite.voms.contact.VOMSSocket.getOutputStream(VOMSSocket.java:
182)
at org.glite.voms.contact.VOMSProxyInit.contactServer
(VOMSProxyInit.java:342)
at org.glite.voms.contact.VOMSProxyInit.getVomsAC(VOMSProxyInit.java:
131)
at org.glite.voms.contact.VOMSProxyInit.getVomsProxy
(VOMSProxyInit.java:256)
at jlite.GridSessionImpl.createProxy(GridSessionImpl.java:169)
at jlite.GridSessionImpl.createProxy(GridSessionImpl.java:117)
at org.ourgrid.gateway.plugins.egee.EGEEHandler.renewProxy
(EGEEHandler.java:198)
at org.ourgrid.gateway.plugins.egee.EGEEHandler.createCFG
(EGEEHandler.java:182)
at org.ourgrid.gateway.plugins.egee.EGEEHandler.submitJobs
(EGEEHandler.java:79)
at org.ourgrid.gateway.QueueManager.runHandler(QueueManager.java:107)
at org.ourgrid.gateway.QueueManager.runLoop(QueueManager.java:131)
at org.ourgrid.gateway.QueueManager.access$0(QueueManager.java:124)
at org.ourgrid.gateway.QueueManager$1.run(QueueManager.java:66)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:
441)
at java.util.concurrent.FutureTask$Sync.innerRunAndReset
(FutureTask.java:317)
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:150)
at java.util.concurrent.ScheduledThreadPoolExecutor
$ScheduledFutureTask.access$101(ScheduledThreadPoolExecutor.java:98)
at java.util.concurrent.ScheduledThreadPoolExecutor
$ScheduledFutureTask.runPeriodic(ScheduledThreadPoolExecutor.java:181)
at java.util.concurrent.ScheduledThreadPoolExecutor
$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:205)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask
(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:619)
2009-09-16 23:16:58,777 - Error communicating with server
voms.eela.ufrj.br:15003:Connection reset

Could you guys help me?
Thanks in advance.

--
Abmar Barros
Undergraduate student at Universidade Federal de Campina Grande
OurGrid Team Member - www.ourgrid.org
Paraíba - Brazil

[Oleg Sukhoroslov]

Hi Abmar,

Most frequently the prolems are due to clock skew.
Check that your system time is correct.
For more information and possible clues see this thread:
http://dev.eclipse.org/mhonarc/lists/geclipse-dev/msg01949.html

Regards,
Oleg

[Abmar Barros]

Hi Oleg,

In fact the clock system was late. Since we corrected the system time, the proxy creation is now working fine.
Thank you so much!

Cheers