The edg-voms-proxy-init generates a proxy with the VOMS information included in a non critical extension.
Options may be specified indifferently with either a "-" or "--" prefix. The options from -help to -out are present for compatibility with grid-proxy-init, and have the exact same meaning. The meaning of the other ones is the following.
-help Displays usage
-version Displays version
-debug Enables extra debug output
-q Quiet mode, minimal output
-verify Verifies certificate to make proxy for
-pwstdin Allows passphrase from stdin
-limited Creates a limited proxy
-hours H Proxy is valid for H hours (default:12)
-vomslife H Tries to get a pseudo cert with information valid for H hours. The default is "as long as the proxy certificate". The special value 0 means as long as the server will allow.
-bits B Number of bits in key {512|1024|2048|4096}
-cert certfile Non-standard location of user certificate
-key keyfile Non-standard location of user key
-certdir certdir Location of trusted certificates dir
-out proxyfile Location of new proxy cert
-voms voms[:command] Specifies the VOMS server to contact using the nickname voms. It also allows to send a specific command to the server. The default command is :all, and it gets all group membership information. Other commands are :/Role=rolename which grants the rolename VO-wide role if the server allows it, and :/group/Role=rolename which grants the role rolename only in the group /group, again only if the server allows it.
-order group[:role] Specifies the order in which the attributes returned by the server should be ordered. The default ordering is unspecified.
-include file Includes file in the certificate (in a non critical extension)
-conf file Read options from file.
-confile file pecifies the name of a configuration file from which a list of nicknames is read. The format of the file is the following: nick host port subject vo Where nick is the nickname, host and port are the hostname and port of the server to contact, subject is the subject of the server's certificate, while vo is the name of the VO that owns the server. The default filename is /etc/vomses. It is important that the file referenced is an actual file and not a link. Moreover, it must be owned by root.root, and its permissions must be 644.
Also, it is possible to specify a directory, that will be entered and scanned. In this case, its permissions must be 755
-userconf file Location of user-defined list of VOMS servers address.
Also, it is possible to specify a directory, that will be entered and scanned. In this case, its permissions must be 755
-policy The file containing the policy expression.
-policy-language pl The language in which the policy is expressed. Default is IMPERSONATION_PROXY.
-path-length Maximum depth of proxy certfificate that can be signed from this.
-globus version Underlying Globus version.
-proxyver Version of the proxy certificate to create. May be 2 or 3. Default value is decided upon underlying globus version.
-noregen Avoid regenerating the initial proxy.
-separate file Saves the voms credential on file file.
-ignorewarn Ignore all warnings. They are not shown to the user.
-failonwarn Warnings become failures. The program will translates all warnings into errors and will react accordingly, by returning a failure itself.