NAME

       pyca - CA written in python

DESCRIPTION

       The  scripts  in this suite are basically wrappers around openssl(1). Additionally the scripts integrates
       the generic CA-functionality with the mail-system and apache for handling certificate requests; with LDAP
       for handling distributing certificates and revocation lists; and cron for maintenance tasks.

PROGRAMMES

       pickle-cnf.py
              Create  a  pickled  copy the OpenSSL configuration object for faster reading of the configuration.
              The pickle-file name is the name of the OpenSSL configuration file plus .pickle.

       ca-make.py
              Generate a CA hierarchy, all necessary files and  directories  and  all  initial  CRLs  (see  also
              signedby  extension  in  OpenSSL  configuration  file). This is intended to be run under user root
              since it sets the ownership and permissions.

       ca-certreq-mail.py
              Handles the mail dialogue after certificate request. The SPKAC certificate request and  LDIF  data
              is  moved  from the directory pend_reqs_dir to new_reqs_dir. Set this script in your /etc/aliases,
              procmailrc or similar to receive mails for the address specified in caCertReqMailAdr.

       ca-cycle-pub.py
              This script is typically run by the CA admin user  via  CRON  or  a  similar  task  manager  on  a
              networked system holding the public certificate data. It does several jobs:

              * Publish new certificates and inform user via e-mail where to download his certificate

              * Remove stale certificate requests from pend_reqs_dir.

              *   Spool  certificate requests and certificate revocation requests to the system holding the CA's
              private keys. (not implemented yet)

              *  Spool certificates and certificate revocation lists from the system holding  the  CA's  private
              keys. (not implemented yet)

       ca-cycle-priv.py
              This  script  is  run  on  the system where the private keys of the CA are stored. It does several
              jobs:

              * Mark expired certificates in OpenSSL certificate database

              * Generate new CRLs, move old CRLs to archive (not implemented yet)

              * Process certificate requests and certificate revocation requests (not implemented yet)

              * Spool certificate database, issued certificates and CRLs to public  WWW  and  LDAP  server  (not
              implemented yet)

SEE ALSO

       pyca(1)

       The programs are documented fully by the HTML documents in /usr/share/doc/pyca/htdocs/

COPYRIGHT

       Copyright © 2001 - 2003 Michael Stroeder <michael@stroeder.com>

       This software including all modules is Open Source and given away under: GPL (GNU GENERAL PUBLIC LICENSE)
       Version 2.

       The author refuses to give any warranty of any kind.

AUTHOR

       Michael Stroeder <michael@stroeder.com>

       This manual page was written by Lars Bahner <bahner@debian.org>, for the Debian GNU/Linux system (but may
       be used by others).

                                                  june 30, 2002                                          pyca(8)