Skip to content

Latest commit

 

History

History
110 lines (80 loc) · 4.03 KB

README.md

File metadata and controls

110 lines (80 loc) · 4.03 KB
Raw

thales-cm-pgp-key-manager

PGP Key Import/Export for CipherTrust

This is a web-based application that allows users to import and export PGP keys with a Thales CipherTrust Manager using a Web UI. It provides a simple interface to manage PGP keys on CipherTrust manager, and show results directly in the browser.

Features

  • Import PGP keys (either by pasting key contents or uploading a key file)
  • Export PGP keys from the CipherTrust Manager
  • Displays results in the browser
  • Supports domains on CipherTrust Manager

Prerequisites

To run this application, you will need:

  • Python 3.x
  • Flask for setting up the web server
  • OpenSSL for generating the SSL certificates (or you can use your own)
  • The following Python packages:
    • flask
    • requests

You can install the necessary dependencies by running:

pip install flask requests

Application Setup

Clone the Repository: Clone this repository to your local machine:

git clone https://github.com/sanyambassi/thales-cm-pgp-key-manager.git
cd thales-cm-pgp-key-manager

SSL Certificate Generation: This application uses SSL to ensure secure communication and generates a self-signed certificate when the application is launched. The certificate and private key are stored inside .\certs directory. You can also generate an SSL certificate manually to ensure secure communication. To generate a self-signed SSL certificate, run the following command:

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout certs/priv_key.pem -out certs/cert.crt -subj "/CN=localhost"

Run the Application

Run the application using the following command:

python app.py

OR

python3 app.py

The application will be accessible at:

https://Your-IP:443

Importing a PGP Key

  • Enter the required details (CipherTrust Manager IP, username, password, domain, auth domain).
  • Select the Import Key option.
  • Enter a name for the PGP Key.
  • Paste the PGP key contents or upload a PGP key file.
  • Click Import Now to import the PGP key.
  • The ID and fingerprint of the imported key will be displayed.

Importing PGP Keys in bulk

  • Enter the required details (CipherTrust Manager IP, username, password, domain, auth domain).
  • Select the Bulk Import option.
  • Upload files containing the PPG keys (one key per file)
  • Click on Import Multiple Keys to import the PGP keys.
  • The ID and fingerprint of the imported keys will be displayed. The name of the keys on the CipherTrust Manager will be the same as the name of the files being uploaded.

Exporting a PGP Key

  • Enter the required details (CipherTrust Manager IP, username, password, domain, auth domain).
  • Select the Export Key option.
  • Enter a key name if you know the name of the key to export. If not, click on List Available Keys to Export to view the list of keys. You can export multiple keys throught the list keys pop up.
  • Click Export Now to export the PGP key (If a key name was provided in the form).
  • The exported PGP key(s) will be displayed.
  • Optionally, download the key.

Project Structure

thales-cm-pgp-key-manager/
│
├── app.py                       # Main application file
├── certs/                       # Directory containing SSL certificates
│   ├── cert.crt                 # Self-signed certificate (generated)
│   └── priv_key.pem             # Self-signed private key (generated)
├── templates/                   # Directory for HTML templates
│   └── index.html               # Main HTML template for the application
├── static/                      # Static directory for the webapp
│   └── images/                  # Directory to store the thales logo image
│       └── thales-logo.jpeg     # Thales logo
└── README.md                    # This readme file

Contributing

If you would like to contribute to this project, please open an issue or submit a pull request with your changes.

License

This project is licensed under the MIT License. See the LICENSE file for details.