Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Query: How to install commercial cert into AIX and use it for FTPS connection Post 302624579 by domenictroilo on Monday 16th of April 2012 12:17:45 PM
Old 04-16-2012
does the AIX server have access to the VeriSign (or other certificate provider) site? This is a requirement to verify the certificate chain.

Domenic
 

9 More Discussions You Might Find Interesting

1. AIX

FTPS - FTP CLIENT- AIX - HELP Please

I'm currently investigating the secure ftp connection from AIX using shell script - It looks openssl is already install and don't know command to be used to connect the secure ftp server. 1. Do I need to install certificate on AIX ?. 2. If any one already design the script to connect secure... (0 Replies)
Discussion started by: dharanir
0 Replies

2. AIX

aix cert 223 need help.

Hi, a friend of mine passed there 223 last year and they gave me there testkiller document which was 65 questions, i am looking at doing my 223 exam and i have gone to testkiller recently and noticed there is an updated version which is now 383 questions. I did the ibm pre-exam and all the... (1 Reply)
Discussion started by: rorted
1 Replies

3. UNIX for Dummies Questions & Answers

Query :: Using Netstat finding total value to a db connection

I wrote a very simple script to calculate the DB connection from an appserver and check the total netstat connection to a particular DB exceed 25 then it will send mail netstat -a 2> /dev/null | awk '/.*ESTAB/{print $5}' | cut -d. -f1 | uniq -c | awk '{if ($1 > 25)print $2," exceed ",$1;}' ... (1 Reply)
Discussion started by: senthil.ak
1 Replies

4. AIX

AIX custom package install query

I have created a .bff package for an app to tbe installed on AIX servers across regions. I am pretty new to the AIX mode of packaging using mkinstallp but I have been able to get the same done. I installed the same on the server in which i created the package and the application was deployed... (9 Replies)
Discussion started by: jobbyjoseph
9 Replies

5. Shell Programming and Scripting

DB connection and query

Hi I'm trying to create a connection with DB from shell script using the following string sqlplus <user>@<db_instance>/<password> in which I'm successful. However, after connecting to DB it is giving me a sql prompt as follows ===================== Connected to: Oracle Database 10g... (2 Replies)
Discussion started by: sainisumit1
2 Replies

6. Emergency UNIX and Linux Support

AIX 6.1 Self-Signed Cert Creation Issue

Hi, I'm trying to get a self-signed cert created on AIX 6.1, and it's not cooperating. I run the following command: gsk7cmd -cert -create -db /bin/A_CACertsOnly.kdb -pw blahblah -label testing -dn cn=machinename -expire 1000 -ca true...and get this response: The function is not supported for... (3 Replies)
Discussion started by: tekster2
3 Replies

7. UNIX for Dummies Questions & Answers

Ftps connection by ksh script

Hi, I'm trying to access to FTP SERVER over SSL with this script unix : (credentials are correct) #!/usr/bin/ksh USER="test" PASSWORD="pwdtest" IP="**.***.*.***" ftp -s $IP 990 << EOF >>log_ftp user $USER $PASSWORD bin passive EOF but seems that credentials are not passed... (2 Replies)
Discussion started by: nash83
2 Replies

8. Shell Programming and Scripting

FTPS Connection script

I have a requirement for which I had to connect to a server using FTPS. I have been provided with these, connection method: FTPS Server Name Port for explicit and implicit Login user I would like to know the FTPS command/script in order to connect to there server and get a file. ... (5 Replies)
Discussion started by: r@v!7*7@
5 Replies

9. UNIX for Advanced & Expert Users

Best way to transfer files to remote FTPS server instead of local FTPS server

Hi, I am working on an application which runs on an Informatica Red-Hat 5.10 Linux Server. The application involves several Informatica ETL workflows which generate 100s of Text files with lot of data. Many of the files will each be up to 5 GB in size. Currently the Informatica server itself... (7 Replies)
Discussion started by: waavman
7 Replies
Credential Handle Management(3) 			       globus gsi credential				   Credential Handle Management(3)

NAME
Credential Handle Management - Typedefs typedef struct globus_l_gsi_cred_handle_s * globus_gsi_cred_handle_t" Initializing and Destroying a Handle globus_result_t globus_gsi_cred_handle_init (globus_gsi_cred_handle_t *handle, globus_gsi_cred_handle_attrs_t handle_attrs) globus_result_t globus_gsi_cred_handle_destroy (globus_gsi_cred_handle_t handle) Copying a Handle globus_result_t globus_gsi_cred_handle_copy (globus_gsi_cred_handle_t source, globus_gsi_cred_handle_t *dest) Getting the Handle Attributes globus_result_t globus_gsi_cred_get_handle_attrs (globus_gsi_cred_handle_t handle, globus_gsi_cred_handle_attrs_t *attrs) Getting the Credential Expiration globus_result_t globus_gsi_cred_get_goodtill (globus_gsi_cred_handle_t cred_handle, time_t *goodtill) Getting the Credential Lifetime globus_result_t globus_gsi_cred_get_lifetime (globus_gsi_cred_handle_t cred_handle, time_t *lifetime) Getting the Credential Strength globus_result_t globus_gsi_cred_get_key_bits (globus_gsi_cred_handle_t cred_handle, int *key_bits) Setting and Getting the Certificate globus_result_t globus_gsi_cred_set_cert (globus_gsi_cred_handle_t handle, X509 *cert) globus_result_t globus_gsi_cred_get_cert (globus_gsi_cred_handle_t handle, X509 **cert) Setting and Getting the Credential Key globus_result_t globus_gsi_cred_set_key (globus_gsi_cred_handle_t handle, EVP_PKEY *key) globus_result_t globus_gsi_cred_get_key (globus_gsi_cred_handle_t handle, EVP_PKEY **key) Setting and Getting the Certificate Chain globus_result_t globus_gsi_cred_set_cert_chain (globus_gsi_cred_handle_t handle, STACK_OF(X509)*cert_chain) globus_result_t globus_gsi_cred_get_cert_chain (globus_gsi_cred_handle_t handle, STACK_OF(X509)**cert_chain) Get Cred Cert X509 Subject Name object globus_result_t globus_gsi_cred_get_X509_subject_name (globus_gsi_cred_handle_t handle, X509_NAME **subject_name) Get X509 Identity Name globus_result_t globus_gsi_cred_get_X509_identity_name (globus_gsi_cred_handle_t handle, X509_NAME **identity_name) Get Cred Cert Subject Name globus_result_t globus_gsi_cred_get_subject_name (globus_gsi_cred_handle_t handle, char **subject_name) Get Policies from Cert Chain globus_result_t globus_gsi_cred_get_policies (globus_gsi_cred_handle_t handle, STACK **policies) Get Policy Languages from Cert Chain globus_result_t globus_gsi_cred_get_policy_languages (globus_gsi_cred_handle_t handle, STACK_OF(ASN1_OBJECT)**policy_languages) Get Cred Cert X509 Issuer Name object globus_result_t globus_gsi_cred_get_X509_issuer_name (globus_gsi_cred_handle_t handle, X509_NAME **issuer_name) Get Issuer Name globus_result_t globus_gsi_cred_get_issuer_name (globus_gsi_cred_handle_t handle, char **issuer_name) Get Identity Name globus_result_t globus_gsi_cred_get_identity_name (globus_gsi_cred_handle_t handle, char **identity_name) Credential validation functions globus_result_t globus_gsi_cred_verify_cert_chain (globus_gsi_cred_handle_t cred_handle, globus_gsi_callback_data_t callback_data) globus_result_t globus_gsi_cred_verify (globus_gsi_cred_handle_t handle) Detailed Description Create/Destroy/Modify a GSI Credential Handle. Within the Globus GSI Credential Library, all credential operations require a handle parameter. Currenlty only one operation may be in progress at once per credential handle. This section defines operations to create, modify and destroy GSI Credential handles. Typedef Documentation typedef struct globus_l_gsi_cred_handle_s* globus_gsi_cred_handle_t GSI Credential Handle. A GSI Credential handle keeps track of state relating to a credential. Handles can have immutable attributes associated with them. All credential operations take a credential handle pointer as a parameter. See also: globus_gsi_cred_handle_init(), globus_gsi_cred_handle_destroy(), globus_gsi_cred_handle_attrs_t Function Documentation globus_result_t globus_gsi_cred_handle_init (globus_gsi_cred_handle_t *handle, globus_gsi_cred_handle_attrs_thandle_attrs) Initializes a credential handle to be used credential handling functions. Takes a set of handle attributes that are immutable to the handle. The handle attributes are only pointed to by the handle, so the lifetime of the attributes needs to be as long as that of the handle. Parameters: handle The handle to be initialized handle_attrs The immutable attributes of the handle Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_handle_destroy (globus_gsi_cred_handle_thandle) Destroys the credential handle. Parameters: handle The credential handle to be destroyed Returns: GLOBUS_SUCCESS globus_result_t globus_gsi_cred_handle_copy (globus_gsi_cred_handle_tsource, globus_gsi_cred_handle_t *dest) Copies a credential handle. Parameters: source The handle to be copied dest The destination of the copy Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_get_handle_attrs (globus_gsi_cred_handle_thandle, globus_gsi_cred_handle_attrs_t *attrs) This function retreives a copy of the credential handle attributes. Parameters: handle The credential handle to retrieve the attributes from attrs Contains the credential attributes on return Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_get_goodtill (globus_gsi_cred_handle_tcred_handle, time_t *goodtill) This function retreives the expiration time of the credential contained in the handle. Parameters: cred_handle The credential handle to retrieve the expiration time from goodtill Contains the expiration time on return Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_get_lifetime (globus_gsi_cred_handle_tcred_handle, time_t *lifetime) This function retreives the lifetime of the credential contained in a handle. Parameters: cred_handle The credential handle to retrieve the lifetime from lifetime Contains the lifetime on return Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_get_key_bits (globus_gsi_cred_handle_tcred_handle, int *key_bits) This function retreives the key strength of the credential contained in a handle. Parameters: cred_handle The credential handle to retrieve the strength from key_bits Contains the number of bits in the key on return Returns: GLOBUS_SUCCESS or an error captured in a globus_result_t globus_result_t globus_gsi_cred_set_cert (globus_gsi_cred_handle_thandle, X509 *cert) Set the Credential's Certificate. The X509 cert that is passed in should be a valid X509 certificate object Parameters: handle The credential handle to set the certificate on cert The X509 cert to set in the cred handle. The cert passed in can be NULL which will set the cert in the handle to NULL, freeing the current cert in the handle. Returns: GLOBUS_SUCCESS or an error object id if an error globus_result_t globus_gsi_cred_get_cert (globus_gsi_cred_handle_thandle, X509 **cert) Get the certificate of a credential. Parameters: handle The credential handle to get the certificate from cert The resulting X509 certificate, a duplicate of the certificate in the credential handle. This variable should be freed when the user is finished with it using the function X509_free. Returns: GLOBUS_SUCCESS if no error, otherwise an error object id is returned globus_result_t globus_gsi_cred_set_key (globus_gsi_cred_handle_thandle, EVP_PKEY *key) Set the private key of the credential handle. Parameters: handle The handle on which to set the key. key The private key to set the handle's key to. This value can be NULL, in which case the current handle's key is freed. globus_result_t globus_gsi_cred_get_key (globus_gsi_cred_handle_thandle, EVP_PKEY **key) Get the credential handle's private key. Parameters: handle The credential handle containing the private key to get key The private key which after this function returns is set to a duplicate of the private key of the credential handle. This variable needs to be freed by the user when it is no longer used via the function EVP_PKEY_free. Returns: GLOBUS_SUCCESS or an error object identifier globus_result_t globus_gsi_cred_set_cert_chain (globus_gsi_cred_handle_thandle, STACK_OF(X509)*cert_chain) Set the certificate chain of the credential handle. Parameters: handle The handle containing the certificate chain field to set cert_chain The certificate chain to set the handle's certificate chain to Returns: GLOBUS_SUCCESS if no error, otherwise an error object id is returned globus_result_t globus_gsi_cred_get_cert_chain (globus_gsi_cred_handle_thandle, STACK_OF(X509)**cert_chain) Get the certificate chain of the credential handle. Parameters: handle The credential handle containing the certificate chain to get cert_chain The certificate chain to set as a duplicate of the cert chain in the credential handle. This variable (or the variable it points to) needs to be freed when the user is finished with it using sk_X509_free. Returns: GLOBUS_SUCCESS if no error, otherwise an error object id is returned globus_result_t globus_gsi_cred_get_X509_subject_name (globus_gsi_cred_handle_thandle, X509_NAME **subject_name) Get the credential handle's certificate subject name. Parameters: handle The credential handle containing the certificate to get the subject name of subject_name The subject name as an X509_NAME object. This should be freed using X509_NAME_free when the user is finished with it Returns: GLOBUS_SUCCESS if no error, a error object id otherwise globus_result_t globus_gsi_cred_get_X509_identity_name (globus_gsi_cred_handle_thandle, X509_NAME **identity_name) Get the identity's X509 subject name from the credential handle. Parameters: handle The credential handle containing the certificate to get the identity from identity_name The identity certificate's X509 subject name Returns: GLOBUS_SUCCESS if no error, otherwise an error object identifier is returned globus_result_t globus_gsi_cred_get_subject_name (globus_gsi_cred_handle_thandle, char **subject_name) Get the credential handle's certificate subject name. Parameters: handle The credential handle containing the certificate to get the subject name of subject_name The subject name as a string. This should be freed using free() when the user is finished with it Returns: GLOBUS_SUCCESS if no error, a error object id otherwise globus_result_t globus_gsi_cred_get_policies (globus_gsi_cred_handle_thandle, STACK **policies) Get the Policies from the Cert Chain in the handle. The policies will be null-terminated as they are added to the handle. If a policy for a cert in the chain doesn't exist, the string in the stack will be set to the static string GLOBUS_NULL_POLICIES Parameters: handle the handle to get the cert chain containing the policies policies the stack of policies retrieved from the handle's cert chain Returns: GLOBUS_SUCCESS or an error object if an error occurred globus_result_t globus_gsi_cred_get_policy_languages (globus_gsi_cred_handle_thandle, STACK_OF(ASN1_OBJECT)**policy_languages) Get the policy languages from the cert chain in the handle. Parameters: handle the handle to get the cert chain containing the policies policy_languages the stack of policies retrieved from the handle's cert chain Returns: GLOBUS_SUCCESS or an error object if an error occurred globus_result_t globus_gsi_cred_get_X509_issuer_name (globus_gsi_cred_handle_thandle, X509_NAME **issuer_name) Get the credential handle's certificate issuer name. Parameters: handle The credential handle containing the certificate to get the issuer name of issuer_name The issuer name as an X509_NAME object. This should be freed using X509_NAME_free when the user is finished with it Returns: GLOBUS_SUCCESS if no error, a error object id otherwise globus_result_t globus_gsi_cred_get_issuer_name (globus_gsi_cred_handle_thandle, char **issuer_name) Get the issuer's subject name from the credential handle. Parameters: handle The credential handle containing the certificate to get the issuer of issuer_name The issuer certificate's subject name Returns: GLOBUS_SUCCESS if no error, otherwise an error object identifier is returned globus_result_t globus_gsi_cred_get_identity_name (globus_gsi_cred_handle_thandle, char **identity_name) Get the identity's subject name from the credential handle. Parameters: handle The credential handle containing the certificate to get the identity of identity_name The identity certificate's subject name Returns: GLOBUS_SUCCESS if no error, otherwise an error object identifier is returned globus_result_t globus_gsi_cred_verify_cert_chain (globus_gsi_cred_handle_tcred_handle, globus_gsi_callback_data_tcallback_data) This function performs path valiadtion on the certificate chain contained in the credential handle. Parameters: cred_handle The credential handle containing the certificate chain to be validated callback_data A initialized callback data structure Returns: GLOBUS_SUCCESS if no error, otherwise an error object identifier is returned globus_result_t globus_gsi_cred_verify (globus_gsi_cred_handle_thandle) This function checks that the certificate is signed by the public key of the issuer cert (the first cert in the chain). Note that this function DOES NOT check the private key or the public of the certificate, as stated in a previous version of the documentation. Parameters: handle The credential handle containing the certificate and key to be validated Returns: GLOBUS_SUCCESS if no error, otherwise an error object identifier is returned Author Generated automatically by Doxygen for globus gsi credential from the source code. Version 5.3 Mon Apr 30 2012 Credential Handle Management(3)
All times are GMT -4. The time now is 08:11 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy