NAME

       htproxyput,   htproxydestroy,  htproxytime,  htproxyunixtime,  htproxyrenew  -  GSI  proxy
       delegations and querying, using GridSite/gLite delegation API

SYNOPSIS

       htproxyput, htproxydestroy, htproxytime, htproxyunixtime, htproxyrenew [options]  Service-
       URL

       htproxyinfo [options]

DESCRIPTION

       htproxyput  is  a  client  to  perform  GSI  proxy  delegations  using  the GridSite/gLite
       delegation  Web  Service  portType.  The  gridsite-delegation(8)  CGI   program   is   the
       complementary server-side implementation.

       htproxyinfo  examines  a local copy of a GSI proxy, and outputs a summary of its X.509 and
       VOMS contents.

OPTIONS

       -v/--verbose
              Turn on debugging information.

       --delegation-id <ID>
              Explicitly specify the Delegation ID to use.

       --destroy
              Instead of delegating a proxy, delete the proxy from  the  service's  proxy  cache.
              Calling the program as htproxydestroy has the same effect.

       --time Instead  of  delegating  a  proxy,  report the expiration time of the proxy, in the
              local time of the client. Calling the program as htproxytime has the same effect.

       --unixtime
              Instead of delegating a proxy, report the expiration time  of  the  proxy,  as  the
              number   of   seconds  since  00:00:00  1970-01-01  UTC.  Calling  the  program  as
              htproxyunixtime has the same effect.

       --renew
              Delegate an updated version of an existing proxy. The Delegation ID must  be  given
              when using this option. Calling the program as htproxyrenew has the same effect.

       --info Examine a local proxy file, and output a summary of the X.509 certificates and VOMS
              attributes it contains. Calling the program as htproxyinfo has the same effect.

       --cert <X.509 cert path>  and  --key <X.509 key path>
              Path to the PEM-encoded X.509 or GSI Proxy user certificate  and  key  to  use  for
              HTTPS  connections,  instead of "anonymous mode." If only one of --key or --cert is
              given, then that will be tried for both. If neither is given,  then  the  following
              order  of  precedence  is used: the file name held by the variable X509_USER_PROXY;
              the file /tmp/x509up_uID (with Unix UID equal  to  ID);  the  file  names  held  by
              X509_USER_CERT    /    X509_USER_KEY;    the   files   ~/.globus/usercert.pem   and
              ~/.globus/userkey.pem (where ~/ is the home directory of the user.)

       --capath <X.509 CA root certs directory or file>
              Path to the PEM-encoded CA root certificates to use when verifying remote  servers'
              host  certificates  in  HTTPS  connections.  Ideally  this should be a directory of
              hash.0 files as described in the OpenSSL verify(1) man page, but a file may be used
              instead.  If  --capath  is  not  given,  the  value  of  the  environment  variable
              X509_CERT_DIR  will  be  tried.   If   this   is   not   valid,   then   /etc/grid-
              security/certificates will be used.

       --no-verify
              Do  not use CA root certificates to verify remote servers' host certificates.  This
              is useful for testing sites before their certificate is set up properly, but leaves
              you  vulnerable  to  "man in the middle" attacks by hostile servers masquerading as
              your target.

FILES

       /tmp/x509up_uID
              Default GSI Proxy file for Unix UID equal to ID.

       /etc/grid-security/certificates
              Default location for trusted Certification Authority root certificates to use  when
              checking server certificates.

       /tmp/.ca-roots-XXXXXX
              Prior  to  7.9.8,  the  underlying  curl  library  did  not  support  the  CA  root
              certificates directory.  If built with an old version of libcurl,  htproxyput  will
              concatenate the certificates in the CA roots directory into a unique temporary file
              and use that.

ENVIRONMENT

       X509_CERT_DIR
              Holds directory to  search  for  Certification  Authority  root  certificates  when
              verifying  server  certificates.  (Tried  if  --capath  is not given on the command
              line.)

       X509_USER_PROXY
              Holds file name of a GSI Proxy to use as user  certificate.  (Tried  if  --cert  or
              --key are not given on the command line.)

       X509_USER_CERT and X509_USER_KEY
              Holds file name of X.509 user certificate and key. (Tried if X509_USER_PROXY is not
              valid.)

EXIT CODES

       0 is returned on complete success, and non-zero on error.

TO DO

       Better error recovery.

AUTHOR

       Andrew McNab <Andrew.McNab@manchester.ac.uk>

       htproxyput is part of GridSite: http://www.gridsite.org/

SEE ALSO

       htcp(1), gridsite-delegation(8)