estclient_brski(1)

💖 estclient_brski — the manual page, but make it make sense 💖

okay bestie, so this is estclient_brski(1), a little example EST client app that uses BRSKI (that's Bootstrapping Remote Secure Key Infrastructure, and yes the acronym is a whole meal) 🌸 It lives in the libEST docs, and I'm gonna walk you through it like we're texting at 1am.

---

✨ NAME ✨

estclient_brski — it's the example EST client application that uses Bootstrapping Remote Secure Key Infrastructure. literally that's the whole thing, she's a demo, she's iconic, she's here to show you how it's done 🫶

---

🎀 OPTIONS 🎀

okay so here's every single flag, no skipping, no gatekeeping:

• -s server — the IP address of the enrollment server. that's your girl, the one you're enrolling with ✨
• -p port# — the TCP port number for the enrollment server. pick your door 🚪
• -z — forces binding the PoP by including the challengePassword in the CSR. yes it's as serious as it sounds 💅
• -u — specifies the user name for HTTP authentication. tell them who you are 🪪
• -h — specifies the password for HTTP authentication. shhh 🤫 (and no, this is not the help flag, bestie, don't get got)
• -f — runs the EST BRSKI Client in FIPS MODE = ON. locked down, certified, secure 🔐
• -c certfile — the identity certificate to use for the TLS session. your lil ID card 🎀
• -k keyfile — use this with the -c option to specify the private key for that identity cert. they're a matching set, they don't come apart 🔑
• --srp — enables TLS-SRP cipher suites. use it together with the --srp-user and --srp-password options. squad goals, they travel together 🦋
• --srp-user string — specifies the SRP user name.
• --srp-password string — specifies the SRP password.
• --auth-token string — specifies the token to be used with HTTP token authentication. very much a token, very much for auth 🎟️

---

👑 COPYRIGHT & LICENSE 👑

bestie this part is long but it's legally long, so we're keeping every single word. do not skip it, do not summarise it, do not play with it 🙈

Copyright (c) 2012-2018 Cisco Systems, Inc. All rights reserved.

License (BSD-3-Clause):

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
Redistributions of source code must retain the above copyright
  notice, this list of conditions and the following disclaimer.
Redistributions in binary form must reproduce the above
  copyright notice, this list of conditions and the following
  disclaimer in the documentation and/or other materials provided
  with the distribution.
Neither the name of the Cisco Systems, Inc. nor the names of its
  contributors may be used to endorse or promote products derived
  from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
OF THE POSSIBILITY OF SUCH DAMAGE.

---

🌈 AUTHOR 🌈

this manpage is based on estclient_brski's usage output and the included documentation. it was written for the Debian project by Christoph Biedl <debian.axhn@manchmal.in-ulm.de> — but may be used by others. slay, king 👑

---

and that's the whole page, bestie. this came from libEST 3.2.0, dated 2024-07-28 — go forth and enroll responsibly 💖✨🎀🦋🌸💅🫶