OSG Software SHA-2 Compliance

OSG VO and Site Administrators,

As of October 1st, 2013, Certificate Authorities (CAs) that are part of the International Grid Trust Federation (IGTF) will begin issuing certificates with new SHA-2 hash algorithms. By this date you will need to update some components of the OSG middleware package to be SHA-2 compliant. At this point all software except the dCache SRM Client has been updated in the OSG software stack. The dCache SRM Client is scheduled for release in the OSG stack on August 13th, 2013. To be fully compliant in all packages you will need to be updated to OSG 3.1.22 or greater. A full table of packages and the OSG version they are compliant at is available at https://www.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if the commonly used software at your site needs to be updated.

The OSG Production and Software Teams are available to answer your questions and support you during upgrade. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.