Welcome to Anchor!

Anchor is an ephemeral PKI service that, based on certain conditions, automates the verification of CSRs and signs certificates for clients. The validity period can be set in the config file with hour resolution.

Contents:

• Configuration files
  • Authentication
  • Signing authority
  • Virtual registration authority
  • Audit
  • Example configuration
• API version 1
  • /robots.txt (GET)
  • /v1/sign/<registration_authority> (POST)
  • /v1/ca/<registration_authority> (GET)
• Extension support
• Extension limitations
• Signing backends
  • anchor
  • pkcs11
  • Backend development
• Ephemeral PKI
  • Traditional Provisioning
  • Anchor Provisioning
  • Traditional Revocation
  • Passive Revocation
• Validators
  • Included validators
  • Extension interface
• Fixups
  • Included fixups
• Audit
  • Capturing events in Ceilometer

Indices and tables

• Index
• Search Page