Failed to load public key

Stratum 1
1

Hi,

I am trying to run the first snapshot for some repositories from OSG on a new Stratum-1 host.
In particular, those with domain name osgstorage.org

I created the usual link, as

[root@stratum1 ~]# ln -s /etc/cvmfs/keys/opensciencegrid.org/ /etc/cvmfs/keys/osgstorage.org

and then added all the repos.
However, the attempt to run the first snapshot is failing.
This is what I got for one of them:

[root@stratum1 ~]# grep CVMFS_PUBLIC_KEY /etc/cvmfs/repositories.d/ligo.osgstorage.org/replica.conf
CVMFS_PUBLIC_KEY=/etc/cvmfs/keys/osgstorage.org

[root@stratum1 ~]# ls -ltr /etc/cvmfs/keys/
total 24
drwxr-xr-x 2 root root  90 May 12 09:40 cern.ch
drwxr-xr-x 2 root root  37 May 12 09:40 opensciencegrid.org
drwxr-xr-x 2 root root  24 May 12 09:40 egi.eu
drwxr-xr-x 2 root root  28 May 12 09:40 ihep.ac.cn
-rw-r--r-- 1 root root 451 May 12 09:44 africa-grid.org.pub
-r--r--r-- 1 root root 452 May 12 09:44 desy.de.pub
-rw-r--r-- 1 root root 452 May 12 09:44 gridpp.ac.uk.pub
-r--r--r-- 1 root root 451 May 12 09:44 nl.pub
-r--r--r-- 1 root root 451 May 12 09:44 softdrive.nl.pub
-r--r--r-- 1 root root 452 May 12 09:44 vlemed.amc.nl.pub
lrwxrwxrwx 1 root root  20 Jun 20 09:40 osgstorage.org -> opensciencegrid.org/

[root@stratum1 ~]# ls -ltr /etc/cvmfs/keys/osgstorage.org/
total 4
-r--r--r-- 1 root root 452 Sep  8  2020 opensciencegrid.org.pub


Jun 20 09:42:03 stratum1 cvmfs_server: (ligo.osgstorage.org) started snapshotting from http://oasis-replica.opensciencegrid.org:8002/cvmfs/ligo.osgstorage.org
Jun 20 09:42:04 stratum1 cvmfs_swissknife: failed to load public key '/etc/cvmfs/keys/osgstorage.org'
Jun 20 09:42:04 stratum1 cvmfs_server: (ligo.osgstorage.org) failed to snapshot from http://oasis-replica.opensciencegrid.org:8002/cvmfs/ligo.osgstorage.org

Did I miss anything?
Any suggestion on how to proceed?

Thanks a lot in advance.
Cheers,
Jose

2

Does it work if you append /opensciencegrid.org.pub to CVMFS_PUBLIC_KEY in /etc/cvmfs/repositories.d/ligo.osgstorage.org/replica.conf? A complete path used to be required, but I’m not sure if it is needed anymore. The cvmfs_server help message says you can use a keys directory and I don’t see the script expanding a directory to files, so it seems it should work, but I don’t know.

3

That may be the case. I am going to try.

4

Yeah, that seems to work.
It may be the case I am running a quite old version of CVMFS (2.9). At some point I need to upgrade.