NAME
pyca - CA written in python
DESCRIPTION
The scripts in this suite are basically wrappers around openssl(1).
Additionally the scripts integrates the generic CA-functionality with
the mail-system and apache for handling certificate requests; with LDAP
for handling distributing certificates and revocation lists; and cron
for maintenance tasks.
PROGRAMMES
pickle-cnf.py
Create a pickled copy the OpenSSL configuration object for
faster reading of the configuration. The pickle-file name is the
name of the OpenSSL configuration file plus .pickle.
ca-make.py
Generate a CA hierarchy, all necessary files and directories and
all initial CRLs (see also signedby extension in OpenSSL
configuration file). This is intended to be run under user root
since it sets the ownership and permissions.
ca-certreq-mail.py
Handles the mail dialogue after certificate request. The SPKAC
certificate request and LDIF data is moved from the directory
pend_reqs_dir to new_reqs_dir. Set this script in your
/etc/aliases, procmailrc or similar to receive mails for the
address specified in caCertReqMailAdr.
ca-cycle-pub.py
This script is typically run by the CA admin user via CRON or a
similar task manager on a networked system holding the public
certificate data. It does several jobs:
* Publish new certificates and inform user via e-mail where to
download his certificate
* Remove stale certificate requests from pend_reqs_dir.
* Spool certificate requests and certificate revocation
requests to the system holding the CA’s private keys. (not
implemented yet)
* Spool certificates and certificate revocation lists from the
system holding the CA’s private keys. (not implemented yet)
ca-cycle-priv.py
This script is run on the system where the private keys of the
CA are stored. It does several jobs:
* Mark expired certificates in OpenSSL certificate database
* Generate new CRLs, move old CRLs to archive (not implemented
yet)
* Process certificate requests and certificate revocation
requests (not implemented yet)
* Spool certificate database, issued certificates and CRLs to
public WWW and LDAP server (not implemented yet)
SEE ALSO
pyca(1)
The programs are documented fully by the HTML documents in
/usr/share/doc/pyca/htdocs/
COPYRIGHT
Copyright © 2001 - 2003 Michael Stroeder <michael@stroeder.com>
This software including all modules is Open Source and given away
under: GPL (GNU GENERAL PUBLIC LICENSE) Version 2.
The author refuses to give any warranty of any kind.
AUTHOR
Michael Stroeder <michael@stroeder.com>
This manual page was written by Lars Bahner <bahner@debian.org>, for
the Debian GNU/Linux system (but may be used by others).
june 30, 2002 pyca(8)