GRID-CA-SIGN(1)

✨ NAME ✨

grid-ca-sign — sign a certificate with a SimpleCA so it can be used on a grid 🦋

🌸 SYNOPSIS 🌸

grid-ca-sign -in REQUEST -out CERTIFICATE [OPTIONS]

grid-ca-sign [ -help | -h | -usage | -version | -versions ]

💅 DESCRIPTION 💅

okay bestie so grid-ca-sign is the program that takes a request file and signs a certificate for it using a CA certificate that was made by grid-ca-create. The fresh new certificate gets written out to a file. periodt. 💖

But here's the thing — if the CA has already signed a certificate with the same subject name that's sitting inside the certificate request, it will refuse to sign the new request. like, absolutely not, no thank you 🙈 — unless you pass the -force option on the command line. Then it's fine, it's giving main character energy.

If you run it as a privileged user, grid-ca-sign uses the CA certificate and signs the certificate just like that 👑. If you're a non-privileged user, grid-ca-sign uses the CA certificate and configuration that live in $HOME/.globus/simpleCA. And if you want a different CA configuration and certificate, the grid-ca-sign program can use one by passing the -dir option. slay, options. ✨

🎀 OPTIONS 🎀

The full set of command-line options to grid-ca-sign is right here, bestie. And btw — on top of all of these, unknown options will get passed to the openssl command when creating the self-signed certificate. iykyk. 🔥

• -help, -h, -usage — shows you all the command-line options for grid-ca-sign and then dips out. bye 👋
• -version, -versions — shows the version number of the grid-ca-sign command. The second form (-versions) also spills the details about the package that contains grid-ca-sign. extra info, we love her 💅
• -in REQUEST — signs the request that's contained in the REQUEST file. 📄
• -out CERTIFICATE — writes the signed request out to the CERTIFICATE file. 💾
• -force — revokes any previously issued certificate with the same subject name as the one in the certificate request, and issues a brand new certificate. Without this? grid-ca-sign will refuse to sign the request. no cap. 😤
• -dir DIRECTORY — signs the certificate using the Simple CA certificate and configuration located in DIRECTORY instead of the default one. 🗂️
• -openssl-help — prints out the command-line options that are available for the openssl ca command. so helpful of her 🫶

🌈 EXAMPLES 🌈

Sign a certificate request using the simple CA in $HOME/SimpleCA'

% *grid-ca-sign* \
    -in usercert_request.pem \
    -out usercert.pem \
    -dir $HOME/SimpleCA

To sign the request please enter the password for the CA key:

The new signed certificate is at: /home/juser/.globus/simpleCA/newcerts/01.pem

🧚 ENVIRONMENT 🧚

These environment variables affect how grid-ca-sign runs:

• GLOBUS_LOCATION — the non-standard installation path of the Grid Community Toolkit. ⭐

💜 SEE ALSO 💜

grid-cert-request(1), grid-ca-create(1), grid-default-ca(1), grid-ca-package(1)

👑 AUTHOR 👑

Copyright © 1999-2014 University of Chicago

okay that's the whole page bestie, go sign some certs 💖✨

this was Grid Community Toolkit 6, dated 03/31/2018 — mwah, stan, bye 🎀🦋💅