Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
PUPPET-SSL(8)			 OpenVox manual 		   PUPPET-SSL(8)

NAME
     puppet-ssl - Manage SSL keys and certificates for OpenVox SSL clients

SYNOPSIS
     Manage SSL keys and certificates for clients needing to communicate with an
     OpenVox infrastructure.

USAGE
     puppet  ssl  action  [-h|--help]  [-v|--verbose]  [-d|--debug]  [--localca]
     [--target CERTNAME]

OPTIONS
     *	 --help: Print this help message.

     *	 --verbose: Print extra information.

     *	 --debug: Enable full debugging.

     *	 --localca Also clean the local CA certificate and CRL.

     *	 --target CERTNAME Clean the specified	device	certificate  instead  of
	 this host's certificate.

ACTIONS
     bootstrap
	    Perform  all of the steps necessary to request and download a client
	    certificate. If autosigning is disabled, then puppet will wait every
	    waitforcert seconds for its certificate to be signed.  To  only  at-
	    tempt once and never wait, specify a time of 0. Since waitforcert is
	    a  Puppet  setting,  it can be specified as a time interval, such as
	    30s, 5m, 1h.

     submit_request
	    Generate a certificate signing request (CSR) and submit  it  to  the
	    CA.  If  a	private  and public key pair already exist, they will be
	    used to generate the CSR. Otherwise, a new key pair will  be  gener-
	    ated.  If  a CSR has already been submitted with the given certname,
	    then the operation will fail.

     generate_request
	    Generate a certificate signing request (CSR). If a private and  pub-
	    lic key pair exist, they will be used to generate the CSR. Otherwise
	    a new key pair will be generated.

     download_cert
	    Download  a  certificate  for  this host. If the current private key
	    matches the downloaded certificate, then  the  certificate	will  be
	    saved  and	used for subsequent requests. If there is already an ex-
	    isting certificate, it will be overwritten.

     verify
	    Verify the private key and certificate are present and match, verify
	    the certificate is issued by a trusted CA, and check revocation sta-
	    tus.

     clean  Remove the private key and certificate related files for this  host.
	    If	--localca  is specified, then also remove this host's local copy
	    of the CA certificate(s) and CRL bundle.  if  --target  CERTNAME  is
	    specified,	then  remove  the files for the specified device on this
	    host instead of this host.

     show   Print the full-text version of this host's certificate.

     COPYRIGHT ------ Copyright (c) 2011 Puppet  Inc.  Copyright  (c)  2024  Vox
     Pupuli Licensed under the Apache 2.0 License

Vox Pupuli			  January 2025			   PUPPET-SSL(8)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=puppet-ssl&sektion=8&manpath=FreeBSD+Ports+15.1.quarterly>

home | help