Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Automatic X509 library. Standalone, but part of the Nimbus project.
Java Shell
tree: 77a88bf621

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
bin
etc
lib
src/org/nimbustools/auto_common
.gitignore
README
build.properties
build.xml

README

Passwordless/scriptable X509 CA library

------------------------------------------------------------------------------
** This should only be used for test situations **

    http://github.com/nimbusproject/nimbus_ezpz_ca

    http://www.apache.org/licenses/LICENSE-2.0
    Copyright 2010 University of Chicago

    This library is used from scripts or Java.  Example invocations can be
    found in the bin directory, the "autocontainer/bin" Nimbus directory, and
    the "web/src/python/nimbusweb/setup/autoca.py" Nimbus file.
------------------------------------------------------------------------------

Prerequisites: Java 1.4, Ant 1.6

Build: ant dist

Usage example of the bin/ samples:

# Create CA cert/key

CA_BASENAME=fakeca
mkdir /tmp/123
./bin/create-ca.sh /tmp/123 $CA_BASENAME


# Create a trusted certificate directory with expected file names

CA_HASH=`openssl x509 -hash -noout -in /tmp/123/$CA_BASENAME.0`
CA_PUB=$CAHASH.0
CA_SP=$CAHASH.signing_policy
mkdir /tmp/trusted-certs
cp /tmp/123/$CA_BASENAME.0 /tmp/trusted-certs/$CA_PUB
cp /tmp/123/$CA_BASENAME.signing_policy /tmp/trusted-certs/$CA_SP


# Create a cert

CAPRIV=/tmp/123/private-key-$CA_BASENAME.pem
HOSTNAME=example.com
mkdir /tmp/hostcertdir
./bin/create-cert.sh /tmp/hostcertdir $HOSTNAME hostcert.pem hostkey.pem $CA_PUB $CAPRIV
Something went wrong with that request. Please try again.