---
name: "smime_keys"
section: "1"
platform: "linux"
package: "mutt"
version: "2.4.3-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/smime_keys"
---

# smime\_keys(1)

Utility to add S/MIME certificate to the internal database used by mutt

## NAME

smime\_keys - Utility to add S/MIME certificate to the internal database used by mutt

## SYNOPSIS

**smime\_keys** \<operation\>  \[file(s) \| keyID \[file(s)\]\]

## DESCRIPTION

The purpose of this tool is to manipulate the internal database of S/MIME certificates used by mutt to sign mail messages which will be sent or to verify mail messages received and signed with S/MIME.

## OPTIONS

- **init**

  no files needed, inits directory structure.

- **refresh**

  no files needed. refreshes index files, including trust flag/expiration.

- **list**

  lists the certificates stored in database.

- **label**

  keyID required. changes/removes/adds label.

- **remove**

  keyID required.

- **verify**

  1=keyID and optionally 2=CRL. Verifies the certificate chain, and optionally whether this certificate is included in supplied CRL (PEM format). Note: to verify all certificates at the same time, replace keyID with "all".

- **add\_cert**

  certificate required.

- **add\_chain**

  three files reqd: 1=Key, 2=certificate plus 3=intermediate certificate(s).

- **add\_p12**

  one file reqd. Adds keypair to database. file is PKCS12 (e.g. export from netscape).

- **add\_pem**

  one file reqd. Adds keypair to database. (file was converted from e.g. PKCS12).

- **add\_root**

  one file reqd. Adds PEM root certificate to the location specified within muttrc (smime\_verify\_\* command).

## NO WARRANTIES

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

Mutt Home Page: http://www.mutt.org/