Killick is a lightweight PKI utilising anchor validation functionality.

install with:

virtualenv .killick-venv (optional) . .killick-venv/bin/activate (optional) pip install pyasn1 python setup.py develop git clone git://git.openstack.org/openstack/anchor cd anchor pip install . cd ..

start with:

pecan serve config.py

list certificates in database:

curl http://0.0.0.0:5000/v1/list curl http://0.0.0.0:5000/v1/list/pending curl http://0.0.0.0:5000/v1/list/denied curl http://0.0.0.0:5000/v1/list/revoked

submit csr:

curl -X POST -F user="test@user.com" -F 'csr=<anchor-test.example.com.csr' http://0.0.0.0:5000/v1/sign

deny/revoke/issue a certificate:

curl http://0.0.0.0:5000/v1/admin/issue/ curl http://0.0.0.0:5000/v1/admin/deny/10012 curl http://0.0.0.0:5000/v1/admin/revoke/10012

fetch/retrieve a certificate: curl http://0.0.0.0:5000/v1/fetch/ curl http://0.0.0.0:5000/v1/retrieve/