verify-proxy-tool(1)

verify-proxy-tool1

Tool to verify a certificate chain including proxies

Usage

verify-proxy-tool [{-h | --help}] [{-d | --debug}] [{-q | --quiet}] [{-t | --atnotbefore}] [proxy]

Overview

This tool does a full chain check of a proxy, following the same logic as the lcmaps_verify_proxy.mod LCMAPS plugin. See for details the corresponding man page.

When no proxy filename is specified as last argument, the default proxy filename for the user is used, i.e. /tmp/x509up_u<UID>.

Options

-d, --debug

Show (debug) output, repeat this option to get more debugging output.

-q, --quiet

Show less output, only printing errors, not warnings.

-h, --help

Show short helptext

-t, --atnotbefore

Verify the proxy chain at (5 minutes after) the 'notBefore' time of the leaf proxy instead of at the current time.

Return values

0

verification and program succeeded

1

non-verification error, e.g. setup of parameters failed.

2

verification error, i.e. proxy is invalid.

Releases

Unchanged in 5 releases since Debian 9 (Stretch).

  1. 9–13

Bugs

Please report any errors to the Nikhef Grid Middleware Security Team <[email protected]>.

Authors

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <[email protected]>.

From lcmaps-plugins-verify-proxy 1.5.10-3 in Debian 13 (Trixie). Parsed by carta from the page's man source.