Scapy Manager (scapy-man)

Step CA Manager using Python

Setup

git clone https://github.com/nikhiljohn10/scapy
cd scapy
pip install --user poetry
poetry update

Demo

poetry run bash examples/deploy.sh

You will be asked to provide a Cloudflare Token to upload the worker. The worker will be uploaded to your Cloudflare Account and deployed to Cloudflare Edge Network.

If successully deployed, you will find a url where the demo CA Root certificate and hosted. Install this certificate in systems to access stepca.nikz.in.

Python Package

pip install scapy-man

Troubleshooting

• If scapy not found: export PATH=$PATH:$(realpath ~/.local/bin)
• If pip not found: sudo apt install python3-pip
• If python3-pip not found: sudo apt update

Usage with Step CA

INSTALLATION_PATHS=$(scapy get step all -p)
sudo dpkg -i $INSTALLATION_PATHS
scapy gen passwords
scapy gen worker

export CA_NAME="Scapy CA"
step ca init \
--name "$CA_NAME" \
--dns stepca.local \
--address :443 \
--provisioner admin \
--password-file $(scapy path password root) \
--provisioner-password-file $(scapy path password provisioner)

step crypto change-pass $(scapy path key intermediate)
export FINGERPRINT=$(step certificate fingerprint $(scapy path cert root))
scapy deploy --worker scapy --js worker.js

In the above commands,

• Generate a password and store in step path
• Generate a basic worker file
• Export CA_NAME variable with CA Name
• Generate PKI using Step CA
• Export FINGERPRINT variable with fingerprint of Root Certificate
• Deploy worker scapy with worker.js as script file.