NAME¶
eurephiadm-certs - Certificate management for eurephia
DESCRIPTION¶
Available modes for the certificate command are:
- -A | --add
- Register a new certificate
- -D | --delete
- Delete a registered certificate
- -l | --list
- List all registered certificates
-h |
--help <mode>
Help about a specific mode
LIST MODE¶
The list mode will list all registered certificates. It accepts one parameter:
- -S | --sort <sort key>
- Decide the sort order of the certificate list
Available sort keys are:
- certid
Numeric certificate ID
- depth
Certificate depth
- digest
Certificate SHA1 digest
- cname
Certificate Common Name field
- org
Certificate organisation field
- email
Certificate e-mail address field
- registered
When the certificate was registered in eurephia.
ADD MODE¶
The add mode will register a new certificate.
- -d | --depth
- Certificate depth, required.
- -D | --digest
- SHA1 fingerprint/digest of the new certificate
- -C | --common-name
- Common name (CN) field of the certificate
- -O | --organisation
- Organisation (O) field of the certificate
- -E | --email
- e-mail address (emailAddress) of the certificate
Usually the certificate depth value needs to be 0, if you are registering user
account certificates. CA certificates usually have a value bigger than 0.
If you have the certificate file available, you can use the following options to
retrieve the needed information directly from a certificate file.
- -f | --certfile
- File name of the certificate file.
- -p | --pkcs12
- If the file is in PKCS#12 format.
The default format is PEM format, unless
--pkcs12 is given. These two
options cannot be used together with
-D,
-C,
-O or
-E. But the certificate depth must be given to indicate the certificate
depth.
DELETE MODE¶
The delete mode will remove a certificate from the certificate database.
- -i | --certid
- Indicates a unique certificate ID
- -d | --digest
- A unique SHA1 fingerprint/digest value
- -C | --common-name
- Common Name (CN) field of a certificate
- -O | --organisation
- Organisation (O) field of a certificate
- -E | --email
- e-mail address (emailAddress) of a certificate
You can use any of these parameters to indicate a search criteria for the
certificate (or certificates) you want to delete. You will be provided with a
list over certificates which matches your search criteria and you will need to
approve the deletion of the matching certificate(s).
SEE ALSO¶
eurephiadm-users(7),
eurephiadm-usercerts(7)
AUTHOR¶
Copyright (C) 2008-2012 David Sommerseth
<dazo@users.sourceforge.net>
