1GRID-CA-SIGN(1)          Grid Community Toolkit Manual         GRID-CA-SIGN(1)
2
3
4

NAME

6       grid-ca-sign - Sign a certificate with a SimpleCA for use on a grid
7

SYNOPSIS

9       grid-ca-sign -in REQUEST -out CERTIFICATE [OPTIONS]
10
11       grid-ca-sign [ -help | -h | -usage | -version | -versions ]
12

DESCRIPTION

14       The grid-ca-sign program signs a certificate based on a request file
15       with a CA certificate created by grid-ca-create. The new certificate is
16       written to a file. If the CA has already signed a certificate with the
17       same subject name as contained in the certificate request, it will
18       refuse to sign the new request unless the -force option is provided on
19       the command-line.
20
21       If run as a privileged user, grid-ca-sign uses the CA certificate and
22       sign the certificate. For a non-privileged user, grid-ca-sign uses the
23       CA certificate and configuration located in $HOME/.globus/simpleCA. The
24       grid-ca-sign program an use a different CA configuration and
25       certificate by using the -dir option.
26

OPTIONS

28       The full set of command-line options to grid-ca-sign follows. In
29       addition to these, unknown options will be passed to the openssl
30       command when creating the self-signed certificate.
31
32       -help, -h, -usage
33           Display the command-line options to grid-ca-sign and exit.
34
35       -version, -versions
36           Display the version number of the grid-ca-sign command. The second
37           form includes details about the package containing grid-ca-sign.
38
39       -in REQUEST
40           Sign the request contained in the REQUEST file.
41
42       -out CERTIFICATE
43           Write the signed request to the CERTIFICATE file.
44
45       -force
46           Revoke any previously issued certificate with the same subject name
47           as in the certificate request and issue a new certificate.
48           Otherwise, grid-ca-sign will refuse to sign the request.
49
50       -dir DIRECTORY
51           Sign the certificate using the Simple CA certificate and
52           configuration located in DIRECTORY instead of the default.
53
54       -openssl-help
55           Print the command-line options available for the openssl ca
56           command.
57

EXAMPLES

59       Sign a certificate request using the simple CA in $HOME/SimpleCA'
60
61           % *grid-ca-sign* \
62               -in usercert_request.pem \
63               -out usercert.pem \
64               -dir $HOME/SimpleCA
65
66           To sign the request please enter the password for the CA key:
67
68           The new signed certificate is at: /home/juser/.globus/simpleCA/newcerts/01.pem
69

ENVIRONMENT

71       The following environment variables affect the execution of
72       grid-ca-sign:
73
74       GLOBUS_LOCATION
75           Non-standard installation path of the Grid Community Toolkit.
76

SEE ALSO

78       grid-cert-request(1), grid-ca-create(1), grid-default-ca(1),
79       grid-ca-package(1)
80

AUTHOR

82       Copyright © 1999-2014 University of Chicago
83
84
85
86Grid Community Toolkit 6          03/31/2018                   GRID-CA-SIGN(1)
Impressum