NAME¶

csaf_provider - CGI program that serves and receives CSAF advisories

SYNOPSIS¶

csaf_provider

DESCRIPTION¶

Implements the upload and management interface of a CSAF trusted provider as a CGI program. It is not meant to be run from a shell: a web server runs it per request, through fcgiwrap or an equivalent, and csaf_uploader(1) is the client that talks to it.

It keeps the provider metadata, the ROLIE feeds and the index files in step as advisories arrive, and it signs them with the OpenPGP key named in its configuration. Advisories are validated against the CSAF JSON schema, so the csaf-oasis-schemas package is needed.

Setting it up means more than installing this package: a web server, the CGI wiring, a TLS client certificate or a password for authentication, and an OpenPGP key. The upstream documentation below covers each step.

FILES¶

/etc/csaf/config.toml

Configuration. The path is compiled in and there is no command line option to change it.

/etc/csaf/openpgp_private.asc

Default location of the OpenPGP private key used to sign advisories.

SEE ALSO¶

csaf_uploader(1), csaf_aggregator(1), /usr/share/doc/csaf-tools/provider-setup.md