p11-kit

Tool for operating on configured PKCS#11 modules

SYNOPSIS

' p11-kit list -modules 'u p11-kit list -modules ' p11-kit extract 'u p11-kit extract . . .
' p11-kit server 'u p11-kit server . . .

DESCRIPTION

p11-kit is a command line tool that can be used to perform operations on PKCS#11 modules configured on the system .

See the various sub commands below . The following global options can be used:

-v, --verbose Run in verbose mode with debug output .

-q, --quiet Run in quiet mode without warning or failure messages .

LIST MODULES

List system configured PKCS#11 modules .


.RS 4
$ p11 -kit list -modules .RE

The modules, information about them and the tokens present in the PKCS#11 modules will be displayed .

EXTRACT

Extract certificates from configured PKCS#11 modules .

This operation has been moved to a separate command trustextract . See trust (1) for more information

SERVER

Run a server process that exposes PKCS#11 module remotely .


.RS 4
$ p11 -kit server pkcs11:token1 pkcs11:token2 . . . $ p11 -kit server --provider /path/to/pkcs11 -module .so pkcs11:token1 pkcs11:token2 . . . .RE

This launches a server that exposes the given PKCS#11 tokens on a local socket . The tokens must belong to the same module . To access the socket, use p11 -kit -client .so module . The server address and PID are printed as a shell -script snippet which sets the appropriate environment variable: P11_KIT_SERVER_ADDRESS and P11_KIT_SERVER_PID .

EXTRACT TRUST

Extract standard trust information files .

This operation has been moved to a separate command trustextract -compat . See trust (1) for more information

REMOTE

Run a PKCS#11 module remotely .


.RS 4
$ p11 -kit remote /path/to/pkcs11 -module .so $ p11 -kit remote pkcs11:token1 pkcs11:token2 . . . .RE

This is not meant to be run directly from a terminal . But rather in a remote option in a pkcs11.conf (5) file .

This exposes the given PKCS#11 module or tokens over standard input and output . Those two forms, whether to expose a module or tokens, are mutually exclusive and if the second form is used, the tokens must belong to the same module .

BUGS

Please send bug reports to either the distribution bug tracker or the upstream bug tracker at https://github.com/p11 -glue/p11 -kit/issues/ .

SEE ALSO

pkcs11.conf(5) Further details available in the p11 -kit online documentation at https://p11-glue .github .io/p11 -glue/p11 -kit/manual/ .

Copied to clipboard
free 100$ digital ocean credit