PKI---KEYID(1)

📦
version 6.1.0 · 9 versions
, in arch rolling, nixos 26.05, nixpkgs unstable

💖 PKI --KEYID(1) 💖

okay bestie, welcome to the strongSwan manual page for the pki --keyid sub-command. It's giving "calculate key identifiers" energy, and honestly? iconic. ✨

✨ NAME ✨

pki --keyid — calculate key identifiers of a key or certificate

🎀 SYNOPSIS 🎀

pki --keyid [--in file|--keyid hex] [--type type] [--id id-type]
            [--format format] [--debug level]

pki --keyid --options file

pki --keyid -h | --help

🌸 DESCRIPTION 🌸

So this sub-command of pki(1) calculates key identifiers of private keys and certificates. That's the whole vibe: private keys, certificates, key identifiers. periodt. 💅

👑 OPTIONS 👑

  • -h, --help — print usage information with a summary of the available options. 🫶
  • -v, --debug level — set debug level, default: 1. 🐛
  • -+, --options file — read command line options from _file_. 📜
  • -i, --in file — input file. If not given the input is read from STDIN. ⌨️
  • -x, --keyid hex — smartcard or TPM private key object handle in hex format with an optional 0x prefix. 🔑
  • -t, --type type — type of input. One of priv (private key), rsa (RSA private key), ecdsa (ECDSA private key), pub (public key), pkcs10 (PKCS#10 certificate request), x509 (X.509 certificate), defaults to priv. 🌈
  • -I, --id id-type — type of identifier. One of all (all identifiers), spk (SHA-1 hash of subjectPublicKey), spki (SHA-1 hash of subjectPublicKeyInfo), defaults to all. 💫
  • -f, --format format — output format. One of pretty (user-readable output), hex (hexadecimal encoding), base64 (Base64 encoding), bin (raw binary data), defaults to pretty. 🎀

🔥 EXAMPLES 🔥

Calculate key identifiers of an RSA private key:

$ pki --keyid --in key.der
subjkey (SHA-1 of subjectPublicKey):
             6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
keyid (SHA-1 of subjectPublicKeyInfo):
             6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...

Calculate key identifiers of an X.509 certificate:

$ pki --keyid --in cert.der --type x509
subjkey (SHA-1 of subjectPublicKey):
             6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
keyid (SHA-1 of subjectPublicKeyInfo):
             6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...

Calculate keyid in simple hex encoding of an X.509 certificate:

$ pki --keyid --in cert.der --type x509 --id spki --format hex
6e55dc7e9ca558d95be3c71314e1...

🦋 SEE ALSO 🦋

  • pki(1) — yes bestie, that's the one. Go read it. 🫶

mwah 💋 — strongSwan 6.1.0, 2019-04-29. that's the tea, bestie. 🫶

📦 where this page comes from