Verbose operation

Get CA certificate from EST server

Enroll with EST server and request a cert

Enroll with EST server and request a cert and a server-side generated private key

Get CSR attributes from EST server

Force binding the PoP by including the challengePassword in the CSR

Re-enroll with EST server and request a cert, must use -c option

Identity certificate to use for the TLS session

Use with -c option to specify private key for the identity cert

Use existing private key in the given file for signing the CSR

Use existing CSR in the given file

Enrollment server IP address

TCP port number for enrollment server

Directory where pkcs7 certs will be written

Number of enrollments to perform per thread (default=1)

Timeout in seconds to wait for server response (default=10)

Runs EST Client in FIPS MODE = ON

Specify user name for HTTP authentication.

Specify password for HTTP authentication.

Print this help message and exit.

Specify en-/decryption of private key, password read from STDIN

Specify en-/decryption of private key, password read from argument

Specify the common name to use in the Suject Name field of the new certificate. 127.0.0.1 will be used if this option is not specified

Convert the new certificate to PEM format

Enable TLS-SRP cipher suites. Use with --srp-user and --srp-password options.

Specify the SRP user name.

Specify the SRP password.

Specify the token to be used with HTTP token authentication.

Specify the optional path segment to use in the URI.

Proxy server to enable SOCK/HTTP proxy mode.

Proxy port number. Must include proxy-server.

Proxy protocol.

Proxy authentication method.

username to pass to proxy server.

password to pass to proxy server.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
Redistributions of source code must retain the above copyright


  notice, this list of conditions and the following disclaimer.
Redistributions in binary form must reproduce the above


  copyright notice, this list of conditions and the following


  disclaimer in the documentation and/or other materials provided


  with the distribution.
Neither the name of the Cisco Systems, Inc. nor the names of its


  contributors may be used to endorse or promote products derived


  from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
OF THE POSSIBILITY OF SUCH DAMAGE.