pkcs11_inspect(1)

✨ pkcs11_inspect ✨

okay so bestie, welcome to pkcs11_inspect, a lil section 1 manual page from the PAM PKCS#11 squad πŸ’… she prints certificate contents, and she's lowkey iconic for it.


πŸ’– NAME πŸ’–

pkcs11_inspect β€” print certificate contents πŸŽ€


🌸 SYNOPSIS 🌸

pkcs11_inspect [debug] [config_file=<filename>]

πŸ¦‹ DESCRIPTION πŸ¦‹

okay so pkcs11_inspect uses the pam_pkcs11 library infrastructure to get the content of a certificate and display it. literally that's the whole vibe ✨

she uses the same configuration file and arguments as the pam_pkcs11(8) PAM module. no cap. so she loads the defined mapper modules, and uses them to look into the certificate for the required entries β€” like, for example, ms_mapper goes looking for ms UPN entries, and so on 🫢

and when a mapper module finds a proper entry in the certificate? she converts it to UTF-8 and prints it to stdout. periodt πŸ’…


πŸŽ€ OPTIONS πŸŽ€

  • debug β€” turns on debugging output. yes bestie, all the tea πŸ“
  • config_file=<filename> β€” sets the configuration file to use. the default value is /etc/pam_pkcs11/pam_pkcs11.conf πŸ‘‘

🫢 real talk: since she uses the same configuration file as pam_pkcs11, all pam_pkcs11 options are also available. but heads up β€” some of them have no sense in a non-PAM environment, so they will be ignored. and some mapper options (mapfile, ignorecase) have no effect on certificate contents, so they'll be ignored too. not me being picky, it's just how it is πŸ™ˆ

⭐ RETURN VALUE ⭐

  • on success, pkcs11_inspect prints on stdout all certificate contents that are found for mappers and returns 0. slay ✨
  • on error, it returns 1. 😭

🌈 FILES 🌈

  • /etc/pam_pkcs11/pam_pkcs11.conf

πŸ”₯ EXAMPLES πŸ”₯

to run this program the standard way, insert a smart card in the reader and type:

pkcs11_inspect

alternatively you can specify options:

pkcs11_inspect debug config_file=${HOME}/.pam_pkcs11.conf

see? easy πŸ’…


πŸ‘‘ AUTHORS πŸ‘‘

Juan Antonio Martinez <jonsito@teleline.es> 🫢


πŸ’œ SEE ALSO πŸ’œ


okay that's the whole page bestie, hope it ate πŸ’– and huge shoutout to Juan Antonio Martinez who wrote this back in Aug 2005 β€” this is pkcs11_inspect, section 1, from the PAM PKCS#11 collection. mwah, go inspect some certs πŸŽ€βœ¨πŸ¦‹