1GRID-CA-SIGN(1) Grid Community Toolkit Manual GRID-CA-SIGN(1)
2
3
4
6 grid-ca-sign - Sign a certificate with a SimpleCA for use on a grid
7
9 grid-ca-sign -in REQUEST -out CERTIFICATE [OPTIONS]
10
11 grid-ca-sign [ -help | -h | -usage | -version | -versions ]
12
14 The grid-ca-sign program signs a certificate based on a request file
15 with a CA certificate created by grid-ca-create. The new certificate is
16 written to a file. If the CA has already signed a certificate with the
17 same subject name as contained in the certificate request, it will
18 refuse to sign the new request unless the -force option is provided on
19 the command-line.
20
21 If run as a privileged user, grid-ca-sign uses the CA certificate and
22 sign the certificate. For a non-privileged user, grid-ca-sign uses the
23 CA certificate and configuration located in $HOME/.globus/simpleCA. The
24 grid-ca-sign program an use a different CA configuration and
25 certificate by using the -dir option.
26
28 The full set of command-line options to grid-ca-sign follows. In
29 addition to these, unknown options will be passed to the openssl
30 command when creating the self-signed certificate.
31
32 -help, -h, -usage
33 Display the command-line options to grid-ca-sign and exit.
34
35 -version, -versions
36 Display the version number of the grid-ca-sign command. The second
37 form includes details about the package containing grid-ca-sign.
38
39 -in REQUEST
40 Sign the request contained in the REQUEST file.
41
42 -out CERTIFICATE
43 Write the signed request to the CERTIFICATE file.
44
45 -force
46 Revoke any previously issued certificate with the same subject name
47 as in the certificate request and issue a new certificate.
48 Otherwise, grid-ca-sign will refuse to sign the request.
49
50 -dir DIRECTORY
51 Sign the certificate using the Simple CA certificate and
52 configuration located in DIRECTORY instead of the default.
53
54 -openssl-help
55 Print the command-line options available for the openssl ca
56 command.
57
59 Sign a certificate request using the simple CA in $HOME/SimpleCA'
60
61 % *grid-ca-sign* \
62 -in usercert_request.pem \
63 -out usercert.pem \
64 -dir $HOME/SimpleCA
65
66 To sign the request please enter the password for the CA key:
67
68 The new signed certificate is at: /home/juser/.globus/simpleCA/newcerts/01.pem
69
71 The following environment variables affect the execution of
72 grid-ca-sign:
73
74 GLOBUS_LOCATION
75 Non-standard installation path of the Grid Community Toolkit.
76
78 grid-cert-request(1), grid-ca-create(1), grid-default-ca(1),
79 grid-ca-package(1)
80
82 Copyright © 1999-2014 University of Chicago
83
84
85
86Grid Community Toolkit 6 03/31/2018 GRID-CA-SIGN(1)