From 722efb88cf12261d705e2a6dfb4aceab9ff7b76f Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Wed, 30 Jan 2013 15:30:52 +0100 Subject: Implement basic extract support * The only formats supported are x509-file and x509-directory Allow tool to build without extract --- doc/p11-kit.xml | 95 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 95 insertions(+) (limited to 'doc/p11-kit.xml') diff --git a/doc/p11-kit.xml b/doc/p11-kit.xml index b885dda..f2af9a6 100644 --- a/doc/p11-kit.xml +++ b/doc/p11-kit.xml @@ -32,6 +32,10 @@ p11-kit list-modules + + p11-kit extract --filter=<what> + --format=<type> /path/to/destination + @@ -73,6 +77,97 @@ $ p11-kit list-modules + Extract + + Extract certificates from configured PKCS#11 modules. + + +$ p11-kit extract --format=x509-directory --filter=ca-certificates /path/to/directory + + + You can specify the following options to control what to extract. + The and arguments + should be specified. By default this command will not overwrite the + destination file or directory. + + + + + Specifies what certificates to export. + You can specify the following values: + + + + Certificate anchors (default) + + + + Blacklisted certificates + + + + All certificates + + + + A PKCS#11 URI + + + + + + + The format of the destination file or directory. + You can specify one of the following values: + + + + DER X.509 certificate file + + + + directory of X.509 certificates + + + + + + + Overwrite output file or directory. + + + + Limit to certificates usable for the given purpose + You can specify one of the following values: + + + + For authenticating servers + + + + For authenticating clients + + + + For email protection + + + + For authenticated signed code + + + + An arbitrary purpose OID + + + + + + + + + Bugs Please send bug reports to either the distribution bug tracker -- cgit v1.1