estproxy(1)

📦
version 3.2.0 · 2 versions
, in debian trixie, ubuntu resolute

💖 NAME 💖

okay bestie, sit down, we're doing this — this is the manpage for estproxy, straight out of the libEST documentation, and it's the example EST proxy application acting as an RA. 🦋

like, an actual Registration Authority, serving the whole enrollment vibe to everyone downstream. she's the middleman and she knows it. 💅

✨ OPTIONS ✨

every single flag, no skips, no "you get the idea" — we don't do that here. 🌸

  • -v — Verbose operation. She will talk, and honestly? let her. 🗣️
  • -n — Disable HTTP authentication. just… turning the bouncer off. no cap.
  • -h — Use HTTP Digest auth instead of Basic auth. fancier lock on the door, same door. 🔐
  • -t — Enable PoP check of TLS UID. 🔥
  • -c file — PEM file to use for server cert. your certificate's whole origin story. 📄
  • -k file — PEM file to use for server key. the secret one. protect her at all costs. 🔑
  • -s server — Upstream server IP address. where she's forwarding her whole situation. 🌈
  • -p port# — Upstream server TCP port#. 🔌
  • -l port# — Downstream client TCP port# to listen on. this is the one the girlies connect to. 👑
  • -r value — HTTP realm to present to clients. the little name-tag she wears when she asks who's there. 🎀
  • -d seconds — Sleep timer to auto-shut the server. she goes to bed on her own schedule, periodt. 😴
  • -f — Runs EST Proxy in FIPS MODE = ON. locked down, government-approved, main character energy. 🔒
  • -6 — Enable IPv6. it's giving ✨future✨.
  • -w count — Timeout in seconds to wait for server response (default=10). ⏳
  • --srp file — Enable TLS-SRP authentication of client using the specified SRP parameters file. 🌟
  • --enhcd_cert_auth — Enable Enhanced Certificate Auth mode. the deluxe version, iykyk. 💜
  • --cert_auth_ah_pwd value — Specify the auth header password to use in Enhanced Certificate Auth mode. 🔑
  • --cert_auth_csr_check_on — Enable the CSR check during Enhanced Cert Auth. 🔍
  • --enhcd_cert_local_nid nid — Sets the local PKI domain subject field NID to grab from the peer cert. If not set the commonName NID will be used. 🧚
  • --enhcd_cert_mfg_name name — Sets name of the manufacturer to be registered. This name is required when registering a manufacturer. 🏭
  • --enhcd_cert_mfg_truststore file — Specifies a truststore file for an Enhanced Certificate Auth manufacturer to select the subject filed based upon. This truststore is required when registering a manufacturer. 📁
  • --enhcd_cert_mfg_nid nid — Sets the subject field NID to grab from the peer cert when that cert came from the manufacturer. If not set the commonName NID will be used. 🦋
  • --path-seg value — Sets the value of the path segment to be injected into the proxy context. 🛤️
  • --perf-timers-on — Enable the performance timers in proxy. she's timing herself, and she's slaying. ⏱️

the legal girlies said we have to include every word, so here is every word. 💖

Copyright (c) 2012-2018 Cisco Systems, Inc. All rights reserved.

License (BSD-3-Clause):

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
Redistributions of source code must retain the above copyright
  notice, this list of conditions and the following disclaimer.
Redistributions in binary form must reproduce the above
  copyright notice, this list of conditions and the following
  disclaimer in the documentation and/or other materials provided
  with the distribution.
Neither the name of the Cisco Systems, Inc. nor the names of its
  contributors may be used to endorse or promote products derived
  from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
OF THE POSSIBILITY OF SUCH DAMAGE.

🫶 AUTHOR 🫶

This manpage is based on estproxy's usage output and the included documentation. It was written for the Debian project by Christoph Biedl <debian.axhn@manchmal.in-ulm.de> but may be used by others. shoutout to Christoph, real one fr fr. 💐

and that's the whole page, bestie — this one's from libEST 3.2.0, dated 2024-07-28, and it's a certified banger. go forth and proxy. 💖✨🎀🦋🌸💅🫶

📦 where this page comes from