source: TI12-security/trunk/python/ndgSetup.sh @ 2145

Subversion URL: http://proj.badc.rl.ac.uk/svn/ndg/TI12-security/trunk/python/ndgSetup.sh@2145
Revision 2145, 1.7 KB checked in by pjkersha, 13 years ago (diff)

python/ndg.security.server/ndg/security/server/ca/server-config.tac: added file copied
from Session Manager equivalent

python/ndg.security.server/ndg/security/server/ca/SimpleCA.py:

  • added ability to generate a certificate request using M2Crypto
  • added properties for running web service over SSL + PKI settings
  • properties file path can be set vai the NDGSEC_CA_PROPFILEPATH environment variable

python/ndg.security.server/ndg/security/server/ca/start-container.sh: script to run
service with twistd.

python/ndg.security.server/ndg/security/server/ca/Makefile: calls to wsdl2dispatch to
generate server side stubs.

python/ndg.security.server/ndg/security/server/SessionMgr/server-config.tac: fixed typo

  • ref to Attribute Authority instead of Session Manager.

python/ndg.security.server/ndg/security/server/MyProxy.py: simplified use of OpenSSLConfig
class.

python/conf/sessionMgrProperties.xml: removed duplicate lines.

python/conf/simpleCAProperties.xml: re-added - for some reason not previously stored in
repository.

python/ndg.security.test/ndg/security/test/ca/server.sh: adapted from Session Manager
version.

python/ndg.security.test/ndg/security/test/ca/caClientTest.cfg: added settings for
issueCert unit test to configure certificate request.

python/ndg.security.test/ndg/security/test/ca/caClientTest.py: setting up
test1IssueCert unit test.

python/ndg.security.test/ndg/security/test/ca/simpleCAProperties.xml: added settings for
SSL and PKI.

python/ndgSetup.sh: set up GRID_SECURITY_DIR environment variable

python/ndg.security.common/ndg/security/common/ca/init.py: Certificate Authority
web service client - updated settings for OpenSSLConfig object and issueCert method.

python/ndg.security.common/ndg/security/common/ca/CertReq.py: old code from alpha version
of NDG-Security.

python/ndg.security.common/ndg/security/common/ca/Makefile: generates client and server
side stubs for Certificate Authority web service.

python/ndg.security.common/ndg/security/common/wsSecurity.py: updated header

python/ndg.security.common/ndg/security/common/openssl.py:

  • fixed regular expression for 'req_distinguished_name' pattern match
  • parameters are parsed in call to read() rather than in getReqDN method.
  • reqDN is now a property.
  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
Line 
1#! /bin/bash
2#
3# Set-up script for NDG security software
4#
5# Run this script to initialise the environment for
6# NDG security
7#
8# NERC Data Grid Project
9#
10# P J Kershaw 21/10/05
11#
12# Copyright (C) 2005 CCLRC & NERC
13#
14# This software may be distributed under the terms of the Q Public License,
15# version 1.0 or later.
16#
17# $Id$
18
19# NDG Installation directory
20export NDG_DIR=<NDG location>
21
22
23# NDG bin directory
24if [ ! `echo ${PATH} | grep "${NDG_DIR}/bin"` ]; then
25
26    export PATH=${NDG_DIR}/bin:$PATH
27fi
28
29
30# NDG shared libraries - set path here or alternatively use ldconfig $NDG_DIR/lib from
31# the command line to link the NDG shared libraries.
32#if [ ! `echo ${LD_LIBRARY_PATH} | grep "${NDG_DIR}/lib"` ]; then
33#
34#    export LD_LIBRARY_PATH=${NDG_DIR}/lib:$LD_LIBRARY_PATH
35#fi
36
37
38# NDG Custom Python installation
39if [ ! `echo ${PATH} | grep "${NDG_DIR}/<Python location>"` ]; then
40
41    export PATH=${NDG_DIR}/<Python location>:$PATH
42fi
43
44
45# Override default port number settings for web services
46#export NDG_AA_PORT_NUM=5001
47#export NDG_SM_PORT_NUM=
48#export NDG_CA_PORT_NUM=
49#export NDG_LOG_PORT_NUM=
50#export NDG_GK_PORT_NUM=
51
52
53# Globus Toolkit and MyProxy Server
54export GLOBUS_LOCATION=<Globus location>
55export GPT_LOCATION=${GLOBUS_LOCATION}
56export GRID_SECURITY_DIR=${GLOBUS_LOCATION}/etc
57
58. ${GLOBUS_LOCATION}/etc/globus-user-env.sh
59
60export MYPROXY_SERVER=<hostname>
61
62# Set DN explicitly to ensure match with server certificate
63#export MYPROXY_SERVER_DN="<hostcert DN with '/' delimiters>"
64
65
66if [ ! `echo ${PATH} | grep "${GLOBUS_LOCATION}/bin"` ]; then
67
68    export PATH=${PATH}:${GLOBUS_LOCATION}/bin
69fi
70
71
72# MySQL or other database
73if [ ! `echo ${PATH} | grep "<db location>"` ]; then
74
75    export PATH=<db location>:$PATH
76fi
Note: See TracBrowser for help on using the repository browser.