NAME

verify-proxy-tool - tool to verify a certificate chain including proxies

SYNOPSIS

verify-proxy-tool [-h|--help] [-d|--debug] [-q|--quiet] [-t|--atnotbefore] [proxy]

DESCRIPTION

This tool does a full chain check of a proxy, following the same logic as the lcmaps_verify_proxy.mod LCMAPS plugin. See for details the corresponding man page.

When no proxy filename is specified as last argument, the default proxy filename for the user is used, i.e. /tmp/x509up_u<UID>.

OPTIONS

-d, --debug

Show (debug) output, repeat this option to get more debugging output.

-q, --quiet

Show less output, only printing errors, not warnings.

-h, --help

Show short helptext

-t, --atnotbefore

Verify the proxy chain at (5 minutes after) the 'notBefore' time of the leaf proxy instead of at the current time.

RETURN VALUES

0

verification and program succeeded

1

non-verification error, e.g. setup of parameters failed.

2

verification error, i.e. proxy is invalid.

BUGS

Please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>.

SEE ALSO

lcmaps_verify_proxy.mod(8).

AUTHORS

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>.