|
Starting July 1, 2006, with version V1-8 of this package, the web hoem page is moved to http://osg.ivdgl.org/twiki/bin/view/Security/CertScriptsPackage.
As an alternative to the web browser interface, these scripts are contributed to the DOEGrids PKI to allow a command-line interface to the certificate authority for submitting certificate requests, retrieving signed certificates, renewing certificates, directory lookup of existing certificates, and checking the remaining lifetime of certificates and certificate revocation lists. They work directly with the PEM format files used by Globus. These are perl scripts and bash shell scripts (some awk), depend upon openssl, ldapsearch and the perl LWP:: module with SSL support. Click on the File link below for the usage description of the script, or to download the tar file package containing the scripts. These scripts hae been tested for work with VDT 1.1.2 and 1.3.1. They are included with VDT, starting with 1.3.1.
File |
description |
| README |
describes the package, includes release notes |
| cert-check-time |
checks lifetime of certificates and revocation lists |
| cert-gridadmin |
immediate issuance of service certificates for authorized requestors |
| cert-lookup |
queries directory based on DN of certificates |
| cert-request |
generates and submits a certificate signing request |
| cert-retrieve |
retrieves signed certificate previously requested |
| cert-renew |
renews existing person certificate (not host or service) |
| cert-scripts.V1-7.tar |
tar file containing scripts (13 Dec 2005) |
Last update:
30-Jun-2006
|