carta
smime_keys_neomutt(1)

smime_keys_neomutt1

Utility to add s/mime certificate to the internal database used by neomutt

Usage

smime_keys <operation> [{file(s) | keyID [file(s)]}]

Overview

The purpose of this tool is to manipulate the internal database of S/MIME certificates used by neomutt to sign mail messages which will be sent or to verify mail messages received and signed with S/MIME.

Options

init

no files needed, inits directory structure.

refresh

no files needed. refreshes index files, including trust flag/expiration.

list

lists the certificates stored in database.

label

keyID required. changes/removes/adds label.

remove

keyID required.

verify

1=keyID and optionally 2=CRL. Verifies the certificate chain, and optionally whether this certificate is included in supplied CRL (PEM format). Note: to verify all certificates at the same time, replace keyID with "all".

add_cert

certificate required.

add_chain

three files reqd: 1=Key, 2=certificate plus 3=intermediate certificate(s).

add_p12

one file reqd. Adds keypair to database. file is PKCS12 (e.g. export from netscape).

add_pem

one file reqd. Adds keypair to database. (file was converted from e.g. PKCS12).

add_root

one file reqd. Adds PEM root certificate to the location specified within muttrc (smime_verify_* command).

No warranties

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

NeoMutt Home Page: https://neomutt.org/

History

  • Arch Linux 2026-11-01 to Debian 13 (Trixie): the text shown here
  • Debian 12 (Bookworm) to Debian 10 (Buster)

From neomutt 1:20260616-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.