pki---pkcs71
Provides pkcs#7 wrap/unwrap functions
Usage
pki {--pkcs7
--sign | --verify | --encrypt | --decrypt | --show
[--in
file]
[--cert
file]
[--key
file]
[--digest
digest]
[--rsa-padding
padding]
[--debug
level]}
pki --pkcs7
--options
file
pki {--pkcs7
-h | --help}
Overview
This sub-command of pki(1) provides functions to wrap/unwrap PKCS#7 containers.
Options
-
-h, --help -
Print usage information with a summary of the available options.
-
-v, --debug level -
Set debug level, default: 1.
-
-+, --options file -
Read command line options from file.
-
-s, --sign -
Create PKCS#7 signed-data.
-
-u, --verify -
Verify PKCS#7 signed-data.
-
-e, --encrypt -
Create PKCS#7 enveloped-data.
-
-e, --decrypt -
Decrypt PKCS#7 enveloped-data.
-
-p, --show -
Show information about PKCS#7 container, list certificates.
-
-i, --in file -
PKCS#7 input file. If not given the input is read from STDIN.
-
-k, --key file -
Private key used for
--signand--decrypt.
-
-c, --cert file -
Certificate for
--sign,--verifyand--encrypt.Can be used multiple times.
-
-g, --digest digest -
Digest to use for signature creation. One of md5, sha1, sha224, sha256, sha384, or sha512. The default is determined based on the type and size of the signature key.
-
-R, --rsa-padding padding -
Padding to use for RSA signatures. Either pkcs1 or pss, defaults to pkcs1.
Releases
7 releases since Debian 8 (Jessie); the text changed 6 times.
--digest since Debian 13 (Trixie);
--rsa-padding since Debian 13 (Trixie);
-R since Debian 13 (Trixie);
-g since Debian 13 (Trixie).