|
|
Bash Courses in Bay Area?
|
|
pyca(8) System Manager's Manual pyca(8) NAME
pyca - CA written in python DESCRIPTION
The scripts in this suite are basically wrappers around openssl(1). Additionally the scripts integrates the generic CA-functionality with the mail-system and apache for handling certificate requests; with LDAP for handling distributing certificates and revocation lists; and cron for maintenance tasks. PROGRAMMES
pickle-cnf.py Create a pickled copy the OpenSSL configuration object for faster reading of the configuration. The pickle-file name is the name of the OpenSSL configuration file plus .pickle. ca-make.py Generate a CA hierarchy, all necessary files and directories and all initial CRLs (see also signedby extension in OpenSSL configura- tion file). This is intended to be run under user root since it sets the ownership and permissions. ca-certreq-mail.py Handles the mail dialogue after certificate request. The SPKAC certificate request and LDIF data is moved from the directory pend_reqs_dir to new_reqs_dir. Set this script in your /etc/aliases, procmailrc or similar to receive mails for the address speci- fied in caCertReqMailAdr. ca-cycle-pub.py This script is typically run by the CA admin user via CRON or a similar task manager on a networked system holding the public cer- tificate data. It does several jobs: * Publish new certificates and inform user via e-mail where to download his certificate * Remove stale certificate requests from pend_reqs_dir. * Spool certificate requests and certificate revocation requests to the system holding the CA's private keys. (not implemented yet) * Spool certificates and certificate revocation lists from the system holding the CA's private keys. (not implemented yet) ca-cycle-priv.py This script is run on the system where the private keys of the CA are stored. It does several jobs: * Mark expired certificates in OpenSSL certificate database * Generate new CRLs, move old CRLs to archive (not implemented yet) * Process certificate requests and certificate revocation requests (not implemented yet) * Spool certificate database, issued certificates and CRLs to public WWW and LDAP server (not implemented yet) SEE ALSO
pyca(1) The programs are documented fully by the HTML documents in /usr/share/doc/pyca/htdocs/ COPYRIGHT
Copyright (C) 2001 - 2003 Michael Stroeder <michael@stroeder.com> This software including all modules is Open Source and given away under: GPL (GNU GENERAL PUBLIC LICENSE) Version 2. The author refuses to give any warranty of any kind. AUTHOR
Michael Stroeder <michael@stroeder.com> This manual page was written by Lars Bahner <bahner@debian.org>, for the Debian GNU/Linux system (but may be used by others). june 30, 2002 pyca(8)
