A tool to retrieve user credentials from ESGF. It have one graphic interface and another command line interface.
JDK or OpenJDK 6 and upper versions
Download the jar -> getESGFCredentials-0.1.jar 476.4 KB new
Go to download folder:
java -jar ESGFToolsUI-v0.8.jar
$ java -jar getESGFCredentials-0.0.2.jar --help esgf-getcredentials. Usage: esgf-getcredentials esgf-getcredentials (-o <openid> | --openid <openid>) [options] esgf-getcredentials (-h | --help) esgf-getcredentials --version Options: -o <openid> --openid <openid> OpenID endpoint from where myproxy information can be gathered. -p --password <password> OpenID passphrase. --output <path> Path of folder where the retrieved certificates will be stored[default: /home/terryk/.esg]. -w --writeall Generate all credentials files. The files generated are the same files generated with opts: --credentials --cacertspem --cacertsjks --cacerts --jkskeystore --jcekskeystore -b --bootstrap To bootstrapping certificates in myproxy service. --credentials Write user certificate and private key in pem format. --cacertspem Write trust CA certificates in pem format. --cacertsjks Write trust CA certificates in JKS keystore format. --cacerts Write trust CA certificates in a folder. --keystorejks Write JKS keystore file. This keystore contains certificate, certificate chain and private key of user --keystorejceks Write JCEKS keystore file. This keystore contains certificate, certificate chain and private key of user -d --debug Turn debugging info on. -h --help Show this screen. --version Show version.
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --credentials --cacerts --cacertsjks
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --credentials --cacertspem --cacertsjks
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --keystorejks --cacertsjks
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --credentials --cacertspem
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --credentials
java -jar getESGFCredentials-0.0.2.jar -o <openid> -p <password> --credentials --cacerts --cacertspem --output <path>
java -jar ESGFToolsUI-v0.8.jar
You can select your IdP provider in the top drop-down list. If your IdP provider isn't in the list of providers. Select "Custom OpenID URL", with this option the GUI interface change to be able write OpenID URL's
You can select in "Generate" section what output files will be generated in the output folder.
credentials.pem | It's a pem file that contains the x509 user certificate and the RSA private key |
keystore (JKS type) | It's a keystore in format JKS which is build with user cert, cert chain and private key |
keystore (JCEKS type) | It's a keystore in format JCEKS which is build with user cert, cert chain and private key |
esgf-truststore.ts | CA's certificates in keystore in format JKS |
certificates | CA's certificate files and policy files in a folder |
ca-certificates.pem | CA's certificates in pem format |
Click on "retrieve credentials" button. If all goes well a success message is shown. However, if some error happens then the Exception is showed
MultiLib jar -> getESGFCredentialsMultLib-0.1.jar 2.3 MB new
?https://github.com/SantanderMetGroup/esgf-getcredentials