Merge branch 'geni-v3' of git://git.onelab.eu/sfa into geni-v3

[sfa.git] / sfa / trust / certificate.py

diff --git a/sfa/trust/certificate.py b/sfa/trust/certificate.py
index 9e0f82b..960a387 100644 (file)
--- a/sfa/trust/certificate.py
+++ b/sfa/trust/certificate.py
@@ -35,6 +35,15 @@
 ##
 #
 
+# Notes on using the openssl command line
+#
+# for verifying the chain in a gid, assuming it is split into pieces p1.pem p2.pem p3.pem
+# you can use openssl to verify the chain using this command
+# openssl verify -verbose -CAfile <(cat p2.pem p3.pem) p1.pem
+# also you can use sfax509 to invoke openssl x509 on all parts of the gid
+#
+
+
 from __future__ import print_function
 
 import functools
@@ -576,7 +585,7 @@ class Certificate:
         message = "{}".format(self.x509.get_subject())
         parent = self.parent
         while parent:
-            message += " -> {}".format(parent.x509.get_subject())
+            message += "->{}".format(parent.x509.get_subject())
             parent = parent.parent
         return message