Publication from : Maarten Litmaath (Maarten.Litmaath@cern.ch)

Dear colleagues,
last week, many of us learned of a severe issue affecting any GEANT
TCS certificate requests, for hosts and users, including renewals.
Service interruption is highly likely starting at the beginning of
January 2025, which may last for a while (how long we cannot yet
predict). The duration and extent of the interruption, as well as any
secondary impacts, cannot yet be fully estimated since it depends on
several factors not detailed in this message.


For users, the ACTIONABLE RECOMMENDATION at this moment is:

* Start planning the renewal of -- AND RENEW over the next few weeks,
and BEFORE the New Year's break! -- any user certificates signed by
one of the GEANT TCS CAs.

* Renew your personal certificates via the /clientgeant endpoint:

https://cert-manager.com/customer/__NREN_NAME__/idp/clientgeant


Meanwhile, take good note of any communications sent by your national
or regional NREN - bearing in mind their communications may end up in
a different department or shared service center of your institution.


======================================================================
To check if a certificate is affected:

openssl x509 -noout -issuer -in $CERTIFICATE | grep GEANT

where $CERTIFICATE can be $HOME/.globus/usercert.pem for example.
======================================================================


More news will be provided hopefully soon.

Link to this broadcast.