NAME
pyca - CA written in python
DESCRIPTION
The scripts in ths suite are basically wrappers around openssl(1).
Additionally the scripts integrates the generic CA-functionality with
the mail-system and apache for handling certificate requests; with LDAP
for handling distributing certificates and revocation lists; and cron
for maintenance tasks.
PROGRAMMES
ca2ldif.py
Write CA certificates and CRLs to a LDIF file. This is intended
for initially setting up the CA entries not for daily CRL
update. The entries are of objectclass certificationAuthority
and contain the attributes cACertificate;binary,
authorityRevocationList;binary and
certificateRevocationList;binary. This might require extending
schemas on LDAPv2 servers. Have a look at your LDAP servers
configuration documentation.
certs2ldap.py
Send all certs and CRLs to a LDAP repository.
copy-cacerts.py
Copy all CA certificates defined in an OpenSSL configuration to
a bundled PEM file or a directory with hash-named symbolic
links. This is quite handy in conjunction with ApacheSSL or
Apache with mod_ssl for copying the files for
SSLCACertificateFile or SSLCACertificatePath.
ns-jsconfig.py
Create Javascript code containing all CA certificates defined in
an OpenSSL configuration for use with the Netscape admin tool
(creating netscape.cfg).
print-cacerts.py
This simple script prints all CA certs on stdout. It is intended
to generate authentic printouts (on paper!) of the CA certs
fingerprints and is typically run on the private CA system.
Choose the option --html to generate nicer formatted HTML-output
instead of the default textual output in ISO-8859-1.
ns-jsconfig.py
Create a Javascript file to be included in a Netscape
configuration file (netscape.cfg).
SEE ALSO
pyca(8)
The programs are documented fully by the HTML documents in
/usr/share/doc/pyca/htdocs/
COPYRIGHT
Copyright © 2001 - 2003 Michael Stroeder <michael@stroeder.com>
This software including all modules is Open Source and given away
under: GPL (GNU GENERAL PUBLIC LICENSE) Version 2.
The author refuses to give any warranty of any kind.
AUTHOR
Michael Stroeder <michael@stroeder.com>
This manual page was written by Lars Bahner <bahner@debian.org>, for
the Debian GNU/Linux system.
june 30, 2002 pyca(1)