[train98@gsu1 ~]$ source /opt/client/setup.sh
[train98@gsu1 ~]$ cert-request --help
usage is : /opt/client/cert-scripts/bin/cert-request [-in filename]
version V2-7
--agree flag to indicate acceptance of the DOEGrids policies
described at
and asserting that you are authorized to request and install
this certificate on the specified host.
--ou [p | s] for OU=People or OU=Services
--name required (quote "multiple words")
--host for OU=Services, required
--service for OU=Services, optional
--email
--phone
--reason
e.g. the science project or collaboration you are a member of,
the DOE facility where you are employee or guest
the university and department where you are a student
(quote "multiple words")
--affiliation
(name of your RA to process this request)
--vo
(name of your Virtual Organization, only when OSG is selected as your RA)
--keyfile name of file holding the private key for the
certificate, not normally needed
--list display list of available RA affiliations and exit
--label optional label for request used to identify local
files used when certificate is later retrieved,
necessary when making multiple requests before retrieving
approved certificates.
if files with this label exist already an error exit occurs
Sponsor information required for OU=People
--sponsor_name (quote "multiple words")
--sponsor_email
--sponsor_phone
--ca to use, default is doegrids,
or testca for worthless certs for testing
--password
--request
--dir
default is ~/.globus for -ou p
default is . for -ou s
if the specified directory does not exist it is created
--debug spews lots of output to the terminal
--dryrun executes script but does not actually post request to CA
--noclean do not delete temporary files
--timeout time limit for http requests
--help prints this message
-V print package version and exit
--read a file containing parameter values in 'name = value'
format for all arguments that take a value except
-timeout. Values on the command line take precedence
over values in the file. Argument flags that don't take
a value must be specified on the command line.
--write the converse of --read
any required omitted argruments will be prompted for
This software is contributed to the DOEGrids PKI and is supported by
the OSG RA. Please send any questions, comments, problems to
osg-ra@opensciencegrid.org and/or dlolson@lbl.gov.
Side effects:
Generates some temporary files that are removed automatically
under normal circumstances.
Also generates files for the key pair, CSR, and a file called
currentCertReq. These files need to be left alone until the
request/approval/retrieval process if complete as they are used
by the cert-retrieve script to download the public certificate
once it has been issued. Therefore one should use a separate working
directory for each request if there are multiple requests in process
simultaneously.
[train98@gsu1 ~]$
--
RobGardner - 18 Oct 2009