NAME

App::CamelPKI - A multi-purpose PKI.

VERSION

Version 0.02

SYNOPSIS

    script/camel_pki_server.pl

DESCRIPTION

Camel-PKI is an X509v3 Certification Authority (CA) programmed in Perl and Catalyst. It relies on Crypt::OpenSSL::CA for the low-level cryptographic operations.

CONFIGURATION

The configuration file is camel_pki.yml. It must be placed at the application root directory. See the bundled file camel_pki.yml.sample for syntax details.

METHODS

model($modelname)

Returns an instance of one of the Catalyst generated object model (as in "model" in Catalyst), or an object with the same API but lesser privilege, depending on the connected user rigths. If user has no rights on $modelname, trigger an exception.

The overloading of this method is key to applying capability discipline, because it forces the Principle of Least Authority (POLA) onto Camel-PKI HTTP/S clients.

setup_components

Overloaded from the parent class in order to lock down restricted class methods in the Camel-PKI model after the respective classes are loaded (see App::CamelPKI::RestrictedClassMethod). This only occurs in production (that is, when running under Apache, as determined by "is_running_under" in App::CamelPKI::SysV::Apache), so that tests can still call restricted methods freely.

SEE ALSO

App::CamelPKI::Controller::Root, Catalyst

AUTHOR

Dominique QUATRAVAUX, <domq at cpan.org> Jeremie KLEIN, <grm at cpan.org>

COPYRIGHT & LICENCE

Copyright 2007 Siemens Business Services S.A.S., all rights reserved.

This program is free software; you can redistribute it following the same terms as Perl itself.