pfstore(1)

💖 pfstore(1) 💖

okay so bestie, welcome to pfstore — she lives in the General Commands Manual section and she is literally here to help you create and manage a pass-phrase store. slay. let's get into it 🎀

---

✨ NAME ✨

pfstore — used to create and manage a pass-phrase store. that's it, that's the job, and she does it flawlessly 💅

---

🌸 SYNOPSIS 🌸

pfstore [-n] [-d] -f pfsfile identity

---

🦋 OPTIONS 🦋

• -n — create the file. yes bestie, make it exist.
• -d — delete the given identity from the store. bye bye 👋
• -f pfsfile — specifies the file that holds the identity/pass-phrase pairs. this is the file you're working with, no cap.

---

💜 DESCRIPTION 💜

pfstore is used to create and manage files that hold identity/pass-phrase pairs. her main character job? managing the owampd.pfs file for owampd. iconic honestly.

if the -d option is not specified, then pfstore prompts the caller for a pass-phrase. that pass-phrase gets hex-encoded and saved in the pfsfile alongside the associated identity. and listen — if the given identity already exists in the pfsfile, the previous pass-phrase gets overwritten with the new one. no hesitation, no drama, just replacement 🫶

pfsfiles generated by pfstore are formatted for use with OWAMP. periodt.

---

🎀 PFSFILE FORMAT 🎀

pfstore generates lines of the format:

test 54b0c58c7ce9f2a8b551351102ee0938

so it's: an identity, followed by whitespace, followed by a variable-length hex-encoded pass-phrase. that's the whole vibe.

No other text is allowed on these lines. literally none. however 💫 comment lines may be added — and a comment line is any line where the first non-white space character is '#'. easy.

---

🌈 EXAMPLES 🌈

the classic

pfstore -f /etc/owampd/owampd.pfs testuser

adds a pass-phrase for the identity testuser. the user gets prompted for a pass-phrase. and btw — if the file does not exist, an error message will be printed and no action will be taken. 🙈

the "make it first" one

pfstore -f /etc/owampd/owampd.pfs -n testuser

creates the file before doing the same as above. but if the file already exists, an error message will be printed and no action will be taken. so like, pick a lane bestie 😭

the "we're done here" one

pfstore -f /etc/owampd/owampd.pfs -d testuser

deletes the identity testuser from the pfsfile. and yeah — if the file does not exist, an error message will be printed and no action will be taken. same energy, same rule.

---

🔥 SECURITY CONSIDERATIONS 🔥

okay this part is important so pay attention: the pass-phrases in the pfsfile are not encrypted in any way. they are simply hex-encoded. that's it. the security of these pass-phrases is completely dependent upon the security of the filesystem and the discretion of the system administrator.

bestie. hex-encoding is not encryption. anyone with the file has the tea. protect that filesystem like it's your notes app 💀

---

⭐ RESTRICTIONS ⭐

identity names are restricted to 80 characters. that's the limit, don't push it.

---

👑 SEE ALSO 👑

owping(1), owampd(1), owampd(1) and the http://e2epi.internet2.edu/owamp web site. (yes, owampd(1) is in there twice — she said it twice because she meant it twice 💅)

---

💖 ACKNOWLEDGMENTS 💖

this material is based, in part, on work supported by the National Science Foundation (NSF) under Grant No. ANI-0314723. any opinions, findings, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the NSF.

---

and that's the whole page bestie 🦋 this version is dated $Date$ and belongs to the pfstore(1) manual — thanks for reading, ily, go manage your pass-phrase store responsibly 💜✨