CAcert System Admins discussion list

[Philipp Guehring <philipp AT cacert.org>]

Hi,

>> Hi, we have an Organizational Account in place with CACert for
>> Vanderbilt University and are exploring the widespread deployment of
>> email certificates for our userbase, consisting of up to 45,000 users
>> in any given academic year.  These certs would be issued on demand
>> (as the users claimed them, if they so choose to) so an API is
>> definitely what we’re looking for.  The Wiki page
>> http://wiki.cacert.org/CertApi does mention an API, but does not
>> include the parameters to include the organizational information
>> unique to Organizational Accounts.  Is this a secondary API that
>> could be made under trivial efforts?  Also, is there any ability to
>> have the API utilize certificate validation rather than
>> username/password validation?
>>
As far as I remember, the API automatically recognizes the Organisation
from the Domain that is used in the certificates. So if you want to
issue a certificate for 
scott.milliken AT Vanderbilt.Edu,
 it recognizes the
Vanderbilt.Edu and adds the appropriate Organisational details to it.
(Like in the webinterface too)
If there are any details missing, please contact me.

The API can be used with either personal client certificates (use
secure.cacert.org instead of www.cacert.org then) or username/password
(with www.cacert.org).
The only limitation at the moment is that we can't limit the certificate
to a specific organisation. The certificate is currently bound to your
personal account, like in the webinterface. If you need additional
restrictions there, please tell us your needs.


Best regards,
Philipp Gühring