878afdf90b
pki: Add support for Ed448 keys/certificates
2020-02-10 13:37:31 +01:00
df6441a13f
pki: Allow inclusion of [unsupported] critical X.509 extension
2019-05-08 14:56:48 +02:00
0c924641e6
pki: Add different output options for --keyid
...
Makes machine-processing these identifiers easier.
2019-05-08 14:56:48 +02:00
943f3929f4
pki: --verify command optionally takes directories for CAs and CRLs
2018-05-18 17:29:00 +02:00
3e7a19bfa9
pki: Extend pki --print with --keyid parameter
2017-12-10 19:31:10 +01:00
d57af8dde0
pki: Optionally generate RSA/PSS signatures
2017-11-08 16:48:10 +01:00
609457e4c8
pki: Fix typo in --print man page
2017-07-05 10:15:45 +02:00
ab94f76df6
pki: Add key object handle of smartcard or TPM private key as an argument to pki --keyid
2017-03-06 18:54:09 +01:00
2d41e1c51c
pki: Edited keyid parameter use in various pki man pages and usage outputs
2017-03-06 18:54:09 +01:00
2d7f940f11
pki: Add a note about constructing RFC 3779 compliant certificates to manpage
2017-02-27 09:36:48 +01:00
ead1dd3bcb
pki: Support an --addrblock option for issued certificates
2017-02-27 09:36:48 +01:00
b6c371fbf1
pki: Support an --addrblock option for self-signed certificates
2017-02-27 09:36:48 +01:00
35bc60cc68
Added support of EdDSA signatures
2016-12-14 11:15:47 +01:00
05ccde0a8b
pki: Add generic 'priv' key type that loads any type of private key
2016-10-05 11:32:52 +02:00
1798e490da
pki: Drop -priv suffix to specify private key types
2016-10-05 11:32:52 +02:00
09d8215d3f
pki: Allow to load CRLs from files in --verify
2016-08-25 11:07:35 +02:00
6ef4668626
pki: Add --dn command to extract the subject DN of a certificate
2015-08-17 11:34:01 +02:00
1bc2549914
pki: Optionally extract public key from given private key in --issue
...
Fixes #618 .
2015-08-10 12:33:02 +02:00
2872f77829
pki: Choose default digest based on the signature key
2015-03-23 17:22:31 +01:00
ae0604f583
pki: Use SHA-256 as default for signatures
...
Since the BLISS private key supports this we don't do any special
handling anymore (if the user choses a digest that is not supported,
signing will simply fail later because no signature scheme will be found).
2015-03-23 17:22:31 +01:00
3a26566fa9
pki: Add command to export certificates and keys from PKCS#12 containers
2014-12-12 13:11:29 +01:00
c20f962732
pki: Reformat PKCS#12 output and add an index for each certificate/key
2014-12-12 13:11:29 +01:00
374b569ed0
pki: Add simple PKCS#12 display command
2014-12-12 13:11:29 +01:00
b9d38c9fa2
pki: Print and document the name constraint type for DNS or email constraints
...
As email constraints may be for a specific host, it is not clear from the
name itself if it is a DNS or email constraint.
2014-10-30 11:40:48 +01:00
ba2805c106
pki: Document --online option for pki --verify and all exit codes
2014-06-30 13:25:13 +02:00
3941d55f01
pki: Document --not-before/after and --dateform options in manpages
2014-03-31 11:39:25 +02:00
6e8c665a51
pki: Add acert and extend pki/print manpages
2014-03-31 11:14:58 +02:00
3114cecdbe
pki: Declare correct section in pki --issue man page
2014-01-24 16:17:46 +01:00
ab155e6907
ignore *.1 manpage files
2013-09-17 10:58:53 +02:00
90afd2c929
pki: --pub also accepts public keys (i.e. to convert them to a different format)
2013-09-13 15:23:49 +02:00
21626bdf77
pki: Add support to encode public keys in SSH key format
2013-09-13 15:23:49 +02:00
0dc8ba8779
pki: Install pki(1) as utility directly in $prefix/bin
...
ipsec pki is maintained as alias.
2013-09-13 15:07:36 +02:00
1a8ffea315
pki: Add example commands to setup a simple CA
2013-09-13 15:07:36 +02:00
b068c4ec9d
pki: Add pki --verify man page
2013-09-13 15:07:36 +02:00
4adeaa5eb9
pki: Add pki --pub man page
2013-09-13 15:07:36 +02:00
a319eff80d
pki: Add pki --print man page
2013-09-13 15:07:35 +02:00
e69fd30538
pki: Add pki --keyid man page
2013-09-13 15:07:35 +02:00
558771400e
pki: Add pki --pkcs7 man page
2013-09-13 15:07:35 +02:00
bb8e2e1759
pki: Add pki --req man page
2013-09-13 15:07:35 +02:00
96aa5a1ddd
pki: Add pki --signcrl man page
2013-09-13 15:07:35 +02:00
42e3a21e24
pki: Add pki --issue man page
2013-09-13 15:07:35 +02:00
3a643b8901
pki: Add pki --self man page
...
Can be opened with "man pki --self".
2013-09-13 15:07:35 +02:00
a612f6e338
pki: Add pki --gen man page
...
Can be opened with "man pki --gen".
2013-09-13 15:07:29 +02:00
34cff9349b
pki: Add ipsec-pki(8) man page
...
Can be opened either with "man ipsec pki" or "man ipsec-pki".
Since man(1) only supports one level of subpages, the forthcoming man
pages for each command will have to be opened with "man pki --<command>".
2013-09-13 14:32:51 +02:00
Tobias Brunner