|GRID-PROXY-INIT(1)||Grid Community Toolkit Manual||GRID-PROXY-INIT(1)|
grid-proxy-init - Generate a new proxy certificate
grid-proxy-init -help | -usage | -version
The grid-proxy-init program generates X.509 proxy certificates derived from the currently available certificate files. By default, this command generates a <ulink url="http://www.ietf.org/rfc/rfc3820.txt">RFC 3820</ulink> Proxy Certificate with a 2048 bit key, valid for 12 hours, in a file named /tmp/x509up_u’UID'. Command-line options and environment variables can modify the format, strength, lifetime, and location of the generated proxy certificate.
X.509 proxy certificates are short-lived certificates, signed usually by a user’s identity certificate or another proxy certificate. The key associated with a proxy certificate is unencrypted, so applications can authenticate using a proxy identity without providing a pass phrase.
Proxy certificates provide a convenient alternative to constantly entering passwords, but are also less secure than the user’s normal security credential. Therefore, they should always be user-readable only (this is enforced by the GSI libraries), and should be deleted after they are no longer needed.
This version of grid-proxy-init supports three different proxy formats: the old proxy format used in early releases of the Globus Toolkit up to version 2.4.x, an IETF draft version of X.509 Proxy Certificate profile used in Globus Toolkit 3.0.x and 3.2.x, and the RFC 3820 profile used in Globus Toolkit Version 4.0.x and 4.2.x. By default, this version of grid-proxy-init creates an RFC 3820 compliant proxy. To create a proxy compatible with older versions of the Globus Toolkit, use the -old or -draft command-line options.
The full set of command-line options to grid-proxy-init are:
-valid HOURS:MINUTES, -hours HOURS
-cert CERTFILE, -key KEYFILE
-pl POLICY-OID, -policy-language POLICY-OID
To create a proxy with the default lifetime and format, run the grid-proxy-init program with no arguments. For example:
% grid-proxy-init Your identity: /DC=org/DC=example/CN=Joe User Enter GRID pass phrase for this identity: XXXXXXX Creating proxy .................................. Done Your proxy is valid until: Thu Mar 18 03:48:05 2010
To create a stronger proxy that lasts for only 8 hours, use the -hours and -bits command-line options to grid-proxy-init. For example:
% grid-proxy-init -hours 8 -bits 4096 Your identity: /DC=org/DC=example/CN=Joe User Enter GRID pass phrase for this identity: XXXXXXX Creating proxy .................................. Done Your proxy is valid until: Thu Mar 17 23:48:05 2010
The following environment variables affect the execution of grid-proxy-init:
The following files affect the execution of grid-proxy-init:
Copyright © 1999-2014 University of Chicago
|03/31/2018||Grid Community Toolkit 6|