{{ session.user.gn }} {{ session.user.sn }} ({{session.user.name }}) settings

Mails will be sent to: {{ session.user.mail }}

You can click here to generate bundle for current user account.

Authority certificate

Several things such as CRL location and e-mails are hardcoded into the certificate and as such require complete reset of X509 infrastructure if some of them needs to be changed:

Mails will appear from: {{ session.authority.certificate.email_address }}

Authority settings

These can be reconfigured via /etc/certidude/server.conf on the server.

Outgoing mail server: {% if session.authority.outbox %} {{ session.authority.outbox }} {% else %} E-mail disabled {% endif %}

Authenticated users allowed from: {% if "0.0.0.0/0" in session.user_subnets %} anywhere

{% for i in session.user_subnets %}
• {{ i }}
{% endfor %}

Request submission is allowed from: {% if "0.0.0.0/0" in session.request_subnets %} anywhere

{% for subnet in session.request_subnets %}
• {{ subnet }}
{% endfor %}

Autosign is allowed from: {% if "0.0.0.0/0" in session.autosign_subnets %} anywhere

{% for subnet in session.autosign_subnets %}
• {{ subnet }}
{% endfor %}

Authority administration is allowed from: {% if "0.0.0.0/0" in session.admin_subnets %} anywhere

{% for subnet in session.admin_subnets %}
• {{ subnet }}
{% endfor %}

Authority administration allowed for:

{% for handle, full_name in session.admin_users %}
• {{ full_name }}
{% endfor %}

Pending requests

Submit a certificate signing request with Certidude:

certidude setup client {{session.common_name}}

{% for request in session.authority.requests %} {% include "views/request.html" %} {% endfor %}

• No certificate signing requests to sign!

Signed certificates

{% for certificate in session.authority.signed | sort | reverse %} {% include "views/signed.html" %} {% endfor %}

Log

Critical Errors Warnings Info Debug

Revoked certificates

To fetch certificate revocation list:

curl {{window.location.href}}api/revoked/ | openssl crl -text -noout

{% for j in session.authority.revoked %}
• {{j.changed}} {{j.serial_number}} {{j.identity}}
{% else %}
• Great job! No certificate signing requests to sign.
{% endfor %}