strongimcv_pki---pkcs7(1) [centos man page]

PKI --PKCS7(1)							    strongSwan							    PKI --PKCS7(1)

NAME

       pki --pkcs7 - Provides PKCS#7 wrap/unwrap functions

SYNOPSIS

       pki --pkcs7 --sign|--verify|--encrypt|--decrypt|--show [--in file] [--cert file] [--key file] [--debug level]

       pki --pkcs7 --options file

       pki --pkcs7 -h | --help

DESCRIPTION

       This sub-command of pki(1) provides functions to wrap/unwrap PKCS#7 containers.

OPTIONS

       -h, --help
	      Print usage information with a summary of the available options.

       -v, --debug level
	      Set debug level, default: 1.

       -+, --options file
	      Read command line options from file.

       -s, --sign
	      Create PKCS#7 signed-data.

       -u, --verify
	      Verify PKCS#7 signed-data.

       -e, --encrypt
	      Create PKCS#7 enveloped-data.

       -e, --decrypt
	      Decrypt PKCS#7 enveloped-data.

       -p, --show
	      Show information about PKCS#7 container, list certificates.

       -i, --in file
	      PKCS#7 input file. If not given the input is read from STDIN.

       -k, --key file
	      Private key used for --sign and --decrypt.

       -c, --cert file
	      Certificate for --sign, --verify and --encrypt.  Can be used multiple times.

SEE ALSO

       pki(1)

5.1.1								    2013-07-31							    PKI --PKCS7(1)

PKI --PUB(1)							    strongSwan							      PKI --PUB(1)

NAME

       pki --pub - Extract a public key from a private key or certificate

SYNOPSIS

       pki --pub [--in file|--keyid hex] [--type type] [--outform encoding] [--debug level]

       pki --pub --options file

       pki --pub -h | --help

DESCRIPTION

       This sub-command of pki(1) extracts public keys from a private keys and certificates.

OPTIONS

       -h, --help
	      Print usage information with a summary of the available options.

       -v, --debug level
	      Set debug level, default: 1.

       -+, --options file
	      Read command line options from file.

       -i, --in file
	      Input file. If not given the input is read from STDIN.

       -t, --type type
	      Type  of	input. One of rsa (RSA private key), ecdsa (ECDSA private key), pub (public key), pkcs10 (PKCS#10 certificate request), or
	      x509 (X.509 certificate), defaults to rsa.

       -f, --outform encoding
	      Encoding of the extracted public key. One of der (ASN.1 DER), pem (Base64 PEM), dnskey (RFC 3110 DNS key), or sshkey (RFC  4253  SSH
	      key), defaults to der.

EXAMPLES

       Extract the public key from an RSA private key:

	 pki --pub --in key.der > pub.der

       Extract the public key from an X.509 certificate:

	 pki --pub --in cert.der --type x509 > pub.der

SEE ALSO

       pki(1)

5.1.1								    2013-07-31							      PKI --PUB(1)