NCSA CA Client Software

NCSA provides a pair of software packages that support requesting and using certificates issued by the National Center for Supercomputing Applications (NCSA) Certificate Authority. The "tools" package includes the command-line client tool for requesting user, host and ldap certificates, and requisite supporting files, including the NCSA CA certificate, config file and man page. The "services" package includes the new NCSA CA certificate and signing policy and the old Alliance certificate and signing policy (NCSA will support the use of Alliance certificates until their expiration). This collection of software and files is needed to use and validate NCSA and Alliance X509 certificates, and also to request and retrieve new NCSA certificates.

This software may be used to request and retrieve a number of different types of certificates from the NCSA CA. This software bundle requires the Grid Packaging Toolkit version 2.0 or later. It is built on top of the Globus Toolkit and relies on OpenSSL to interact with the Alliance CA server.

Installation

The following installation instructions assume you already have GPT and Globus Toolkit software installed on your system. Make sure the GLOBUS_LOCATION environment variable is set to the location of the Globus installation to which you want to add the NCSA CA software and the GPT_LOCATION environment variable is set to the location of your GPT installation before proceeding.

  1. Download and save the NCSA CA client tools package and the NCSA CA services package on your system.

  2. Build the packages using GPT's build command.

    $GPT_LOCATION/sbin/gpt-build ncsa_ca_services-1.0-src.tar.gz
    $GPT_LOCATION/sbin/gpt-build ncsa_ca_tools-2.1-src.tar.gz

  3. Run the post-install setup script (this only applies to the ncsa_ca_services package, the ncsa_ca_tools package has no post-install step).

    $GPT_LOCATION/sbin/gpt-postinstall

For more information on the NCSA PKI, including instructions for using these tools to obtain certificates, see the NCSA Public Key Infrastructure (PKI) Information Page.