Module ImportFrom alias ImportFrom alias Import alias Import alias Import alias Assign NameStore Str Assign NameStore NameLoad FunctionDef arguments args defaults body Global identifier If UnaryOpNot NameLoad body Assign NameStore Call NameLoad Str keyword Str If CompareIn Str NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args defaults body Expr Call NameLoad Global identifier If Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad body Assign NameStore Call NameLoad BinOpMod Str NameLoad keyword Str If BoolOpOr CompareEq NameLoad Str CompareEq NameLoad Str body Expr Call NameLoad BinOpMod Str NameLoad Expr Call NameLoad BinOpMod Str NameLoad Expr Call NameLoad BinOpMod Str NameLoad Expr Call NameLoad BinOpMod Str NameLoad Assign NameStore Call NameLoad Str keyword Str Assign NameStore Call NameLoad Str keyword Str Assign NameStore Call NameLoad Str keyword Str Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad Str Assign NameStore Call NameLoad NameLoad Str Assign NameStore NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad NameLoad Expr Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr Expr Call NameLoad BinOpMod Str NameLoad Expr Call NameLoad BinOpMod Str NameLoad Expr Call NameLoad BinOpMod Str NameLoad decorator_list FunctionDef arguments args defaults body Expr Call NameLoad Global identifier Expr Call NameLoad BinOpMod Str NameLoad Print Str Print Str Print BinOpMod Str NameLoad Print Str Print Str decorator_list FunctionDef arguments args defaults body Expr Call NameLoad Global identifier Assign NameStore Call NameLoad Str keyword Str Assign NameStore Call NameLoad Str keyword Str Expr Call NameLoad BinOpMod Str TupleLoad NameLoad NameLoad NameLoad NameLoad Expr Call NameLoad BinOpMod Str TupleLoad NameLoad NameLoad NameLoad Expr Call NameLoad BinOpMod Str TupleLoad NameLoad NameLoad Print Str Print Str Print BinOpMod Str TupleLoad NameLoad NameLoad NameLoad NameLoad Print Str Print Str decorator_list
N/A __future__ with_statement fabric.api * N/A os N/A re N/A time N/A ca_config_content [ req ]
default_bits            = 2048
default_keyfile         = ./private/root.key
default_md              = sha1
prompt                  = no
distinguished_name      = root_ca_distinguished_name
x509_extensions = v3_ca

[ root_ca_distinguished_name ]
countryName             = US
stateOrProvinceName     = California
localityName            = La Jolla
0.organizationName      = Ocean Observatory Initiative
commonName              = COMMONNAME
emailAddress            = EMAILADDRESS

[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true

[ ca ]
default_ca              = CA_default

[ CA_default ]
dir                     = .
new_certs_dir           = ./signed-keys/
database                = ./conf/index
certificate             = ./public/root.crt
serial                  = ./conf/serial
private_key             = ./private/root.key
x509_extensions         = usr_cert
name_opt                = ca_default
cert_opt                = ca_default
default_crl_days        = 30
default_days            = 365
default_md              = sha1
preserve                = no
policy                  = policy_match

[ policy_match ]
countryName             = match
stateOrProvinceName     = supplied
organizationName        = supplied
organizationalUnitName  = optional
commonName              = supplied
emailAddress            = optional

[ usr_cert ]
basicConstraints=CA:FALSE
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer:always
nsCaRevocationUrl     = REVOCATIONURL
 N/A ca_dir None setcadir N/A N/A N/A N/A N/A ca_dir N/A N/A ca_dir N/A N/A ca_dir N/A prompt Certificate Authority directory:  default ~/ION_CA N/A N/A ~ ca_dir N/A N/A homedir N/A N/A os getenv HOME N/A ca_dir N/A N/A N/A os path join homedir N/A N/A ca_dir strip ~/ N/A mkca N/A N/A N/A N/A N/A N/A setcadir N/A ca_dir N/A N/A N/A N/A os path exists ca_dir N/A N/A do_del N/A prompt N/A %s already exists.  Delete?  ca_dir default Y N/A N/A N/A do_del Y N/A do_del y N/A N/A N/A local N/A rm -rf %s ca_dir N/A N/A local N/A rm -rf %s ca_dir N/A N/A local N/A mkdir -m 0755 %s ca_dir N/A N/A local N/A cd %s;mkdir -m 0755 conf private public signed-keys ca_dir N/A rootca_common_name N/A prompt Certificate Authority common name:  default Ocean Observatory Initiative Root CA N/A rootca_email_address N/A prompt Certificate Authority email address:  default owen_ownerrep@google.com N/A revocation_url N/A prompt Revocation URL:  default https://security.oceanobservatories.org/revoke N/A o_path N/A N/A N/A os path join ca_dir conf/openssl.cnf N/A o N/A open o_path w+ N/A openssl_cnf ca_config_content N/A openssl_cnf N/A N/A re sub COMMONNAME rootca_common_name openssl_cnf N/A openssl_cnf N/A N/A re sub EMAILADDRESS rootca_email_address openssl_cnf N/A openssl_cnf N/A N/A re sub REVOCATIONURL revocation_url openssl_cnf N/A N/A N/A o write openssl_cnf N/A N/A N/A o close N/A N/A local N/A chmod 0600 %s/conf/openssl.cnf ca_dir N/A N/A local N/A echo '01' > %s/conf/serial ca_dir N/A N/A local N/A touch %s/conf/index ca_dir N/A mkrootcert N/A N/A N/A N/A N/A N/A setcadir N/A ca_dir N/A N/A local N/A cd %s;openssl req -nodes -config conf/openssl.cnf -days 1825 -x509 -newkey rsa:1024 -out public/root.crt -outform PEM ca_dir N/A ####################################### N/A ####################################### N/A N/A You can now copy file %s/private/root.crt to the keystore ca_dir N/A ####################################### N/A ####################################### N/A mkcontainercert N/A N/A N/A N/A N/A N/A setcadir N/A ca_dir N/A key_duration N/A prompt Key duration:  default 365 N/A key_filename N/A prompt Key and CRT filename prefix:  default container N/A N/A local N/A cd %s;openssl req -config conf/openssl.cnf -new -nodes -keyout private/%s.key -out public/%s.csr -outform PEM -days %s N/A ca_dir key_filename key_filename key_duration N/A N/A local N/A cd %s;openssl ca -batch -config conf/openssl.cnf -in public/%s.csr -out public/%s.crt N/A ca_dir key_filename key_filename N/A N/A local N/A cd %s;openssl verify -purpose sslserver -CAfile public/root.crt public/%s.crt N/A ca_dir key_filename N/A ####################################### N/A ####################################### N/A N/A You can now copy files %s/public/%s.key and %s/private/%s.crt to the keystore N/A ca_dir key_filename ca_dir key_filename N/A ####################################### N/A ####################################### N/A