eurephiadm-certs(7)

Certificate management for

Section 7 eurephia bookworm source

Description

eurephiadm certs

NAME

eurephiadm-certs - Certificate management for eurephia

DESCRIPTION

Available modes for the certificate command are:
-A | --add

-D | --delete

Delete a registered certificate

-l | --list

List all registered certificates

-h | --help <mode>

Help about a specific mode

LIST MODE

The list mode will list all registered certificates. It accepts one parameter:
-S | --sort <sort key>

Decide the sort order of the certificate list

Available sort keys are:

certid
Numeric certificate ID

depth
Certificate depth

digest
Certificate SHA1 digest

cname
Certificate Common Name field

org
Certificate organisation field

email
Certificate e-mail address field

registered
When the certificate was registered in eurephia.

ADD MODE

The add mode will register a new certificate.
-d | --depth

Certificate depth, required.

-D | --digest

SHA1 fingerprint/digest of the new certificate

-C | --common-name

Common name (CN) field of the certificate

-O | --organisation

Organisation (O) field of the certificate

-E | --email

e-mail address (emailAddress) of the certificate

Usually the certificate depth value needs to be 0, if you are registering user account certificates. CA certificates usually have a value bigger than 0.

If you have the certificate file available, you can use the following options to retrieve the needed information directly from a certificate file.
-f | --certfile

File name of the certificate file.

-p | --pkcs12

If the file is in PKCS#12 format.

The default format is PEM format, unless --pkcs12 is given. These two options cannot be used together with -D, -C, -O or -E. But the certificate depth must be given to indicate the certificate depth.

DELETE MODE

The delete mode will remove a certificate from the certificate database.
-i | --certid

Indicates a unique certificate ID

-d | --digest

A unique SHA1 fingerprint/digest value

-C | --common-name

Common Name (CN) field of a certificate

-O | --organisation

Organisation (O) field of a certificate

-E | --email

e-mail address (emailAddress) of a certificate

You can use any of these parameters to indicate a search criteria for the certificate (or certificates) you want to delete. You will be provided with a list over certificates which matches your search criteria and you will need to approve the deletion of the matching certificate(s).