File: grid-ca-sign.1

package info (click to toggle)
globus-simple-ca 5.0-1
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, buster
  • size: 544 kB
  • sloc: sh: 5,231; perl: 267; makefile: 98
file content (144 lines) | stat: -rw-r--r-- 4,412 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
'\" t
.\"     Title: grid-ca-sign
.\"    Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
.\"      Date: 03/31/2018
.\"    Manual: Grid Community Toolkit Manual
.\"    Source: Grid Community Toolkit 6
.\"  Language: English
.\"
.TH "GRID\-CA\-SIGN" "1" "03/31/2018" "Grid Community Toolkit 6" "Grid Community Toolkit Manual"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
grid-ca-sign \- Sign a certificate with a SimpleCA for use on a grid
.SH "SYNOPSIS"
.sp
\fBgrid\-ca\-sign\fR \-in \fIREQUEST\fR \-out \fICERTIFICATE\fR [OPTIONS]
.sp
\fBgrid\-ca\-sign\fR [ \-help | \-h | \-usage | \-version | \-versions ]
.SH "DESCRIPTION"
.sp
The \fBgrid\-ca\-sign\fR program signs a certificate based on a request file with a CA certificate created by \fBgrid\-ca\-create\fR\&. The new certificate is written to a file\&. If the CA has already signed a certificate with the same subject name as contained in the certificate request, it will refuse to sign the new request unless the \fI\-force\fR option is provided on the command\-line\&.
.sp
If run as a privileged user, \fBgrid\-ca\-sign\fR uses the CA certificate and sign the certificate\&. For a non\-privileged user, \fBgrid\-ca\-sign\fR uses the CA certificate and configuration located in $HOME/\&.globus/simpleCA\&. The \fBgrid\-ca\-sign\fR program an use a different CA configuration and certificate by using the \fI\-dir\fR option\&.
.SH "OPTIONS"
.sp
The full set of command\-line options to \fBgrid\-ca\-sign\fR follows\&. In addition to these, unknown options will be passed to the \fBopenssl\fR command when creating the self\-signed certificate\&.
.PP
\fB\-help, \-h, \-usage\fR
.RS 4
Display the command\-line options to
\fBgrid\-ca\-sign\fR
and exit\&.
.RE
.PP
\fB\-version, \-versions\fR
.RS 4
Display the version number of the
\fBgrid\-ca\-sign\fR
command\&. The second form includes details about the package containing
\fBgrid\-ca\-sign\fR\&.
.RE
.PP
\fB\-in \fR\fB\fIREQUEST\fR\fR
.RS 4
Sign the request contained in the
\fIREQUEST\fR
file\&.
.RE
.PP
\fB\-out \fR\fB\fICERTIFICATE\fR\fR
.RS 4
Write the signed request to the
\fICERTIFICATE\fR
file\&.
.RE
.PP
\fB\-force\fR
.RS 4
Revoke any previously issued certificate with the same subject name as in the certificate request and issue a new certificate\&. Otherwise,
\fBgrid\-ca\-sign\fR
will refuse to sign the request\&.
.RE
.PP
\fB\-dir \fR\fB\fIDIRECTORY\fR\fR
.RS 4
Sign the certificate using the Simple CA certificate and configuration located in
\fIDIRECTORY\fR
instead of the default\&.
.RE
.PP
\fB\-openssl\-help\fR
.RS 4
Print the command\-line options available for the
\fBopenssl ca\fR
command\&.
.RE
.SH "EXAMPLES"
.sp
Sign a certificate request using the simple CA in $HOME/SimpleCA\*(Aq
.sp
.if n \{\
.RS 4
.\}
.nf
% *grid\-ca\-sign* \e
    \-in usercert_request\&.pem \e
    \-out usercert\&.pem \e
    \-dir $HOME/SimpleCA
.fi
.if n \{\
.RE
.\}
.sp
.if n \{\
.RS 4
.\}
.nf
To sign the request please enter the password for the CA key:
.fi
.if n \{\
.RE
.\}
.sp
.if n \{\
.RS 4
.\}
.nf
The new signed certificate is at: /home/juser/\&.globus/simpleCA/newcerts/01\&.pem
.fi
.if n \{\
.RE
.\}
.SH "ENVIRONMENT"
.sp
The following environment variables affect the execution of \fBgrid\-ca\-sign\fR:
.PP
GLOBUS_LOCATION
.RS 4
Non\-standard installation path of the Grid Community Toolkit\&.
.RE
.SH "SEE ALSO"
.sp
grid\-cert\-request(1), grid\-ca\-create(1), grid\-default\-ca(1), grid\-ca\-package(1)
.SH "AUTHOR"
.sp
Copyright \(co 1999\-2014 University of Chicago