pyGsi: M2Crypto extensions for GSS API, and proxy tools
Lawrence Berkeley National Laboratory
Computational Research Division
Distributed Computing Department

Documentation Related Projects Links Mailing Lists

overview

This package provides 3 scripts that generate, query and destroy proxy certificates. These are based on the globus grid-proxy tools, but they have a lot less functionality. There is proxy module for performing basic tasks with the proxy certificates. There is also an extension module __mic which is used to generate and verify message integrity codes. These are needed for Message Level Security.

dependencies

  • M2Crypto 0.16 (the latest released version)
  • Openssl-0.9.8 contains support for proxy certificates.

future work

The proxy_init script should be able to verify a certificate chain that contains a proxy. The proxy_init script should also have a bits argument, to specify the size of the key that is generated. Right now it generates a 512 bit key.

Download

Subversion Access

  • svn co https://bosshog.lbl.gov:/repos/pyGsi

contact

Matt Rodriguez