MyProxy Client Package

This a pure Python implementation of a client to the MyProxy Credential Management Server (http://grid.ncsa.uiuc.edu/myproxy/). It provides both a Python API and a command line interface.

• i.e. MyProxy C client libraries are not required for this package.

It uses pyOpenSSL to make an SSL connection to the server following the messaging interface as outlined in: http://grid.ncsa.uiuc.edu/myproxy/protocol/

The code is based on an original program myproxy_logon by Tom Uram of ANL.

Examples

These show how to retrieve a certificate bootstrapping trust in remote service:

API

>>> from myproxy.client import MyProxyClient
>>> myproxy_clnt = MyProxyClient(hostname="myproxy.somewhere.ac.uk")
>>> cert, private_key = myproxy_clnt.logon(username, password, bootstrap=True)

Command line interface

$ myproxyclient logon -s myproxy.somewhere.ac.uk -l <username> -o creds.pem -b

Releases

2.1.1

• allow support for Python=3.12 via retirement of SafeConfigParser via #20 by Valeriu Predoi and checked by Alan Iwi
• added Python package components (basic unit test, Github Action that builds and uploads the package) via #22 by Valeriu Predoi and Bouwe Andela

2.1.0

• Refactored package hierarchy - myproxy.client is now a package
• fixed six package dependency

2.0.3

• Default to TLS v1.2 for security

2.0.2

• Added new command line option -e which will force output of any error trace. The default is now that the error trace is not echoed. Instead only the message from top-level exception is included.
• Fix for certificate DN list for Python 2 version. Thanks to Lukasz for reporting the bug: https://github.com/cedadev/MyProxyClient/issues/12

2.0.1

• Updated hashing algorithm to sha256 after reported errors interacting with some servers

2.0.0

• Ported to Python 3. This version is dual compatible with Python 2 and 3.
• Minor fix to script to improve error reporting
• Added Vagrantfile to enable provisioning of test myproxy-server for use with the tests.

Tested on CentOS 6.8 and OSX El Capitan

1.4.4

• Minor changes for ready for inclusion in conda-forge. Thanks to Alex Goodman.

1.4.3

• Fix for SSL to use TLS instead of SSLv3 to address POODLE vulnerability
• Fix for SSL verification for PyOpenSSL version 0.14 - v1.3.1 was broken because it passed the call back method to OpenSSL using verification classes' __call__ method.

Tested on CentOS 6.4

1.3.1

• Fix to MyProxyClient.writeProxyFile and MyProxyClient.readProxyFile to correctly pick-up overridden file setting. Thanks to Nicolas Carenton, IPSL.

Tests

Unit test module with test files is in test/. See the README in that directory.

Documentation

Sphinx generated documentation is available in documentation/. run the Makefile to regenerate if required.

Thanks

• to OMII-UK (Now Software Sustainability Institute) for funding development of NDG Security (2007-2008)
• Tom Uram who wrote the myproxy_logon program on which this package is based.