NAME

       pyca - CA written in python

DESCRIPTION

       The  scripts  in  this  suite  are  basically wrappers around openssl(1). Additionally the
       scripts integrates the generic  CA-functionality  with  the  mail-system  and  apache  for
       handling  certificate  requests;  with  LDAP  for  handling  distributing certificates and
       revocation lists; and cron for maintenance tasks.

PROGRAMMES

       pickle-cnf.py
              Create a pickled copy the OpenSSL configuration object for faster  reading  of  the
              configuration.  The  pickle-file name is the name of the OpenSSL configuration file
              plus .pickle.

       ca-make.py
              Generate a CA hierarchy, all necessary files and directories and all  initial  CRLs
              (see also signedby extension in OpenSSL configuration file). This is intended to be
              run under user root since it sets the ownership and permissions.

       ca-certreq-mail.py
              Handles the mail dialogue after certificate request. The SPKAC certificate  request
              and  LDIF  data is moved from the directory pend_reqs_dir to new_reqs_dir. Set this
              script in your /etc/aliases, procmailrc or similar to receive mails for the address
              specified in caCertReqMailAdr.

       ca-cycle-pub.py
              This  script  is  typically  run  by  the  CA admin user via CRON or a similar task
              manager on a networked system holding the public certificate data. It does  several
              jobs:

              *  Publish  new  certificates  and  inform  user  via  e-mail where to download his
              certificate

              * Remove stale certificate requests from pend_reqs_dir.

              *  Spool certificate requests and certificate revocation  requests  to  the  system
              holding the CA's private keys. (not implemented yet)

              *   Spool certificates and certificate revocation lists from the system holding the
              CA's private keys. (not implemented yet)

       ca-cycle-priv.py
              This script is run on the system where the private keys of the CA  are  stored.  It
              does several jobs:

              * Mark expired certificates in OpenSSL certificate database

              * Generate new CRLs, move old CRLs to archive (not implemented yet)

              * Process certificate requests and certificate revocation requests (not implemented
              yet)

              * Spool certificate database, issued certificates and CRLs to public WWW  and  LDAP
              server (not implemented yet)

SEE ALSO

       pyca(1)

       The programs are documented fully by the HTML documents in /usr/share/doc/pyca/htdocs/

COPYRIGHT

       Copyright © 2001 - 2003 Michael Stroeder <michael@stroeder.com>

       This  software including all modules is Open Source and given away under: GPL (GNU GENERAL
       PUBLIC LICENSE) Version 2.

       The author refuses to give any warranty of any kind.

AUTHOR

       Michael Stroeder <michael@stroeder.com>

       This manual page was written by Lars Bahner <bahner@debian.org>, for the Debian  GNU/Linux
       system (but may be used by others).

                                          june 30, 2002                                   pyca(8)