% GENPROXY(1) genproxy 2.1 | User Commands % Jan Just Keijser (Nikhef), Frank Scheiner (HLRS) % Apr 25, 2019
genproxy - create GSI proxy credentials with just OpenSSL and a POSIX compatible shell
genproxy [options]
genproxy is a POSIX shell script that can be used to generate GSI proxy credentials (GPCs) like grid-proxy-init(1) but with just openssl(1) and without the need for the Globus Toolkit itself.
The options are as follows:
Display susage.
Displays version.
Enables extra debug output (you can specify it multiple times).
Quiet mode, minimal output.
Creates a limited proxy.
Creates a independent proxy.
Creates a draft (GSI-3) proxy.
Creates a legacy proxy.
Creates a RFC3820 compliant proxy (default).
Number of days the proxy is valid (default=1).
Allow a chain of at most N proxies to be generated from this one (default=-1, i.e. unlimited).
Number of bits in key (512, 1024, 2048, default=1024).
SHA hashing strength to use (default=sha256).
Non-standard location of user certificate or PKCS#12 file.
Non-standard location of user key.
Non-standard location of new proxy cert.
As an alternative to the --out option, you can also predefine the path and name of the GPC in the environment variable X509_USER_PROXY (for example with export X509_USER_PROXY="$HOME/.globus/mygpc"). If both X509_USER_PROXY is set and the --out option is used, the latter takes precedence!
Your personal X.509 certificate.
The matching private key to your personal X.509 certificate.
Your personal X.509 certificate and matching private key in a PKCS#12 keystore.
GPC could not be created.
Temporary file for operation could not be created.
User certificate file could not be read.
Given credentials were invalid.
openssl(1SSL), grid-proxy-init(1), mktemp(1)