pkcs11_inspect(1)
β¨ pkcs11_inspect β¨
okay so bestie, welcome to pkcs11_inspect, a lil section 1 manual page from the PAM PKCS#11 squad π she prints certificate contents, and she's lowkey iconic for it.
π NAME π
pkcs11_inspect β print certificate contents π
πΈ SYNOPSIS πΈ
pkcs11_inspect [debug] [config_file=<filename>]
π¦ DESCRIPTION π¦
okay so pkcs11_inspect uses the pam_pkcs11 library infrastructure to get the content of a certificate and display it. literally that's the whole vibe β¨
she uses the same configuration file and arguments as the pam_pkcs11(8) PAM module. no cap. so she loads the defined mapper modules, and uses them to look into the certificate for the required entries β like, for example, ms_mapper goes looking for ms UPN entries, and so on π«Ά
and when a mapper module finds a proper entry in the certificate? she converts it to UTF-8 and prints it to stdout. periodt π
π OPTIONS π
debugβ turns on debugging output. yes bestie, all the tea πconfig_file=<filename>β sets the configuration file to use. the default value is/etc/pam_pkcs11/pam_pkcs11.confπ
π«Ά real talk: since she uses the same configuration file as pam_pkcs11, all pam_pkcs11 options are also available. but heads up β some of them have no sense in a non-PAM environment, so they will be ignored. and some mapper options (mapfile,ignorecase) have no effect on certificate contents, so they'll be ignored too. not me being picky, it's just how it is π
β RETURN VALUE β
- on success, pkcs11_inspect prints on stdout all certificate contents that are found for mappers and returns
0. slay β¨ - on error, it returns
1. π
π FILES π
/etc/pam_pkcs11/pam_pkcs11.conf
π₯ EXAMPLES π₯
to run this program the standard way, insert a smart card in the reader and type:
pkcs11_inspect
alternatively you can specify options:
pkcs11_inspect debug config_file=${HOME}/.pam_pkcs11.conf
see? easy π
π AUTHORS π
Juan Antonio Martinez <jonsito@teleline.es> π«Ά
π SEE ALSO π
- pam_pkcs11(8)
- pklogin_finder(1)
- PAM-PKCS11 User Manual
okay that's the whole page bestie, hope it ate π and huge shoutout to Juan Antonio Martinez who wrote this back in Aug 2005 β this is pkcs11_inspect, section 1, from the PAM PKCS#11 collection. mwah, go inspect some certs πβ¨π¦
π¦ where this page comes from
- debian bookworm: libpam-pkcs11 0.6.12-1+deb12u1
- debian trixie: libpam-pkcs11 0.6.13-1
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- ubuntu jammy: libpam-pkcs11 0.6.11-4build2
- ubuntu jammy: libpam-pkcs11 0.6.11-4ubuntu0.1
- ubuntu noble: libpam-pkcs11 0.6.12-2build3
- ubuntu noble: libpam-pkcs11 0.6.12-2ubuntu0.24.04.1
- ubuntu questing: libpam-pkcs11 0.6.13-1
- ubuntu resolute: libpam-pkcs11 0.6.13-1build1
- ubuntu stonking: libpam-pkcs11 0.6.13-2ubuntu1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms