1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
|
'\" t
.\" Title: grid-ca-sign
.\" Author: University of Chicago
.\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
.\" Date: 07/22/2011
.\" Manual: Globus Commands
.\" Source: Globus Toolkit 5.2.0
.\" Language: English
.\"
.TH "GRID\-CA\-SIGN" "1" "07/22/2011" "Globus Toolkit 5.2.0" "Globus Commands"
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
grid-ca-sign \- Sign a certificate with a SimpleCA for use on a grid
.SH "SYNOPSIS"
.HP \w'\fBgrid\-ca\-sign\fR\ 'u
\fBgrid\-ca\-sign\fR [\-help] [\-h] [\-usage] [\-version] [\-versions]
.HP \w'\fBgrid\-ca\-sign\fR\ 'u
\fBgrid\-ca\-sign\fR \-in\ \fIREQUEST\fR \-out\ \fICERTIFICATE\fR
.br
[\-force] [\-dir\ \fIDIRECTORY\fR]
.br
[\-openssl\-help] [\fIOPENSSL\-OPTIONS\fR]
.SH "DESCRIPTION"
.PP
The
\fBgrid\-ca\-sign\fR
program signs a certificate based on a request file with a CA certificate created by
\fBgrid\-ca\-create\fR\&. The new certificate is written to a file\&. If the CA has already signed a certificate with the same subject name as contained in the certificate request, it will refuse to sign the new request unless the
\fB\-force\fR
option is provided on the command\-line\&.
.PP
If run as a privileged user,
\fBgrid\-ca\-sign\fR
uses the CA certificate and configuration located in
\fB${localstatedir}\fR/lib/globus/simple_ca
to sign the certificate\&. For a non\-privileged user,
\fBgrid\-ca\-sign\fR
uses the CA certificate and configuration located in
\fB$HOME\fR/\&.globus/simpleCA\&. The
\fBgrid\-ca\-sign\fR
program an use a different CA configuration and certificate by using the
\fB\-dir\fR
option\&.
.PP
The full set of command\-line options to
\fBgrid\-ca\-sign\fR
follows\&. In addition to these, unknown options will be passed to the
\fBopenssl\fR
command when creating the self\-signed certificate\&.
.PP
\fB\-help\fR, \fB\-h\fR, \fB\-usage\fR
.RS 4
Display the command\-line options to
\fBgrid\-ca\-sign\fR
and exit\&.
.RE
.PP
\fB\-version\fR, \fB\-versions\fR
.RS 4
Display the version number of the
\fBgrid\-ca\-sign\fR
command\&. The second form includes details about the package containing
\fBgrid\-ca\-sign\fR\&.
.RE
.PP
\fB\-in \fR\fB\fIREQUEST\fR\fR
.RS 4
Sign the request contained in the
\fIREQUEST\fR
file\&.
.RE
.PP
\fB\-out \fR\fB\fICERTIFICATE\fR\fR
.RS 4
Write the signed request to the
\fICERTIFICATE\fR
file\&.
.RE
.PP
\fB\-force\fR
.RS 4
Revoke any previously issued certificate with the same subject name as in the certificate request and issue a new certificate\&. Otherwise,
\fBgrid\-ca\-sign\fR
will refuse to sign the request\&.
.RE
.PP
\fB\-dir \fR\fB\fIDIRECTORY\fR\fR
.RS 4
Sign the certificate using the Simple CA certificate and configuration located in
\fIDIRECTORY\fR
instead of the default\&.
.RE
.PP
\fB\-openssl\-help\fR
.RS 4
Print the command\-line options available for the
\fBopenssl ca\fR
command\&.
.RE
.SH "EXAMPLES"
.PP
Sign a certificate request using the simple CA in
\fB$HOME\fR/SimpleCA
.sp
.if n \{\
.RS 4
.\}
.nf
% \fBgrid\-ca\-sign\fR \fB\-in usercert_request\&.pem \-out usercert\&.pem\fR \fB\-dir \fR\fB\fB$HOME\fR\fR\fB/SimpleCA\fR
To sign the request
please enter the password for the CA key:
The new signed certificate is at: /home/juser/\&.globus/simpleCA/newcerts/01\&.pem
.fi
.if n \{\
.RE
.\}
.sp
.SH "ENVIRONMENT VARIABLES"
.PP
The following environment variables affect the execution of
\fBgrid\-ca\-sign\fR:
.PP
\fBGLOBUS_LOCATION\fR
.RS 4
Non\-standard installation path of the Globus toolkit\&.
.RE
.SH "SEE ALSO"
.PP
\fBgrid-cert-request\fR(1),
\fBgrid-ca-create\fR(1),
\fBgrid-default-ca\fR(1),
\fBgrid-ca-package\fR(1)
.SH "AUTHOR"
.PP
\fBUniversity of Chicago\fR
|
