---
name: "pkcipe"
section: "8"
platform: "linux"
package: "pkcipe"
version: "1.5.4free-12"
release: "Debian 4.0 (Etch)"
platforms: ["linux"]
url: "https://new.carta.tech/pkcipe"
---

# pkcipe(8)

PK implementation for CIPE

## NAME

pkcipe - PK implementation for CIPE

## SYNOPSIS

**pkcipe** \[*OPTIONS*\] NAME

## DESCRIPTION

**pkcipe** is a helper tool to set up VPNs using CIPE.

Each machine in the VPN has an identity (such as its host name) and a public/private RSA key pair. The private key is stored in /etc/cipe/identity.priv. For every allowed CIPE connection, the public key of the other part is stored, along with configuration parameters, in /etc/cipe/pk/NAME (where NAME is the identity of the other part). Thus storing a public key gives permission to connect, similar to the SSH package (it is important to know how this works to not open holes).

For a quick overview on how to set up **pkcipe** on a Debian system, please refer to /usr/share/doc/pkcipe/README.Debian.gz. There is also more information on how to invoke **pkcipe** in /usr/share/doc/pkcipe/README.gz.

## OPTIONS

A summary of the **pkcipe** options is included below.

- **-i**

  To be invoked from inetd. Incompatible with -c.

- **-c host:port**

  To connect to host:port. Incompatible with -i.

- **-k keyfile**

  Gives location of private key file.

- **-r ipaddr**

  Routing IP address. Only for unusual cases, s.b.

- **-D flags**

  Debugging flags.

- **-E**

  Use stderr instead of syslog. (Debugging only, incompatible with -i.)

- **-p proto**

  Fall back to given protocol level.

- **-t secs**

  Set timeout.

## SEE ALSO

[**rsa-keygen**(8)](/rsa-keygen/8.md),[**ciped**(8)](/ciped/8.md)\

## AUTHOR

This manual page was written by Sam Hocevar \<sam@zoy.org\> for the Debian system (but may be used by others).