CL-API-SERVER(1)

NAME

cl-core - The server part of package calculate-api

SYNOPSIS
[-l] [-p] [-c] [--req] [--sc] [-d] [--db] [--rm] [--right-add] [--right-del] [--gen-root-cert] [--gen-cert-by] [--get-cert-from] [--use-root-as-server] [--sign-client] [--sign-server] [--del-req] [--rv] [--version] [-h]

DESCRIPTION

cl-core - currently no description.

OPTIONS

Options for cl-core:

-l, --lang LANG
    Language choice. LANG - language translation, for example ru, english, en.

-p, --port port number

-c, --cert ID
    Operations with certificates. ID - certificate number or 'all'. If use this option Server not run.

-r, --show-request REQ_ID
    View clients requests. ID - request number or 'all'. If use this option Server not run.

--sc, --server-cert CERT_ID
    View servers certificates and requests. CERT_ID - certificate (request) number or 'all'. If use this option Server not run.

-d, --dump
    Dump. Use with keys '-c' or '-r'. When used with options 'all' will give details information about all certificates. If you specify a certificate number will give his contents.

--db, --debug
    Debugging mode (debug).

--rm, --remove
    Remove certificate. Use with key '-c'.

--right-add RIGHT_ADD
    Add rights for certificate. Supported by a list of certificates and a list of rights (via ','). Use with key '-c'. When used with --right-del, first added right, and then removed.

--right-del RIGHT_DEL
    Remove rights certificate. Supported by a list of certificates and a list of rights (via ','). Use with key '-c'. When used with --right-add first added right, and then removed.

--gen-root-cert
    Generate a root certificate (CA certificate).

--gen-cert-by HOST
    Send request to sign root certificate. HOST - network address of destination host (IP or HOSTNAME).

--get-cert-from ROOT_HOST
    Get signed certificate from server. ROOT_HOST - network address of destination host (IP or HOSTNAME).

--use-root-as-server
    Use root certificate as a server certificate.

--sign-client ID_CLIENT_REQ
    Sign client's request by server certificate. ID_CLIENT_REQ - request number.

--sign-server ID_SERVER_REQ
    Sign server's request by root certificate. ID_SERVER_REQ - request number.

--del-req ID_DEL_REQ
    Refuse to sign request. ID_DEL_REQ - request number.

--rv, --revoke-cert REVOKE_CERT_ID
    Revoke early signed server (or ca) certificate. Use value rm for REVOKE_CERT_ID to remove CRL.

--version
    Prints program version and exit.

-h, --help
    Prints help and exits.

SEE ALSO

cl-console-gui(1)

EXAMPLES

Generate a root certificate
cl-core --gen-root-cert

Sending request to a remote server with address 192.168.0.155
cl-core -gen-cert-by 192.168.0.155

For certificates with numbers 1,2 and 5 add rights to methods user-mod, group-mod and detele rights to method cl-install.
cl-core -c 1,2,5 --right-add user-mod,group-mod --right-del cl-install

View information about all certificates.
cl-core -c all -d

Start server in debug mode with English localization.
cl-core --debug --lang en

Remove certificate with number 7.
cl-core -c 7 --remove

FILES

/var/calculate/server
    Directory with clients and servers request and signed certificates, rights certificates (groups), information abuon sessions and processes.

/var/calculate/server/ca
    Directory with server certificates, root and CA certificates.

/var/calculate/server/client_certs
    Clients request and signed certificates.

/var/calculate/server/server_certs
    Servers request and signed certificates.

/var/calculate/server/conf/group_right.conf
    List of methods available for groups.
    Example of content:
    manager pid_info,list_pid,cl_template,cl_login

/var/calculate/server/conf/right.conf
    list of number certificates who are allowed (forbidden) execution of the method.
    Example of content:
    pid_info 2 -1
    Certificate number 2 has right to run method "pid_info", and the certificate number 1 does not have rights. Use key --right-add and --right-del.

AUTHORS

Calculate Utilities are developed by Calculate Ltd. http://www.calculate.ru

AUTHOR

This man page was originally written by Calculate Ltd. http://www.calculate.ru