PKI---PKCS7(1)

💖 NAME 💖

okay so bestie, welcome to the PKI --PKCS7(1) page from strongSwan — this is all about pki --pkcs7, the sub-command that provides PKCS#7 wrap/unwrap functions. It's giving container-adjacent main character energy, and honestly? Obsessed. ✨

pki --pkcs7 — provides PKCS#7 wrap/unwrap functions. Periodt. 💅

✨ SYNOPSIS ✨

Here's the exact shape of it, bestie — keep the commands character-for-character:

pki --pkcs7 --sign|--verify|--encrypt|--decrypt|--show [--in file]
            [--cert file] [--key file] [--digest digest]
            [--rsa-padding padding] [--debug level]

pki --pkcs7 --options file

pki --pkcs7 -h | --help

🦋 DESCRIPTION 🦋

So pki --pkcs7 is a sub-command of pki(1), and it literally hands you the functions to wrap and unwrap PKCS#7 containers. That's the whole assignment. No cap. 🫶

💅 OPTIONS 💅

Okay, option-by-option, group-chat style — but every flag and value stays exactly as printed:

• -h, --help — prints usage information with a summary of the available options. Your little map, your little moment. 🗺️
• -v, --debug level — sets the debug level. Default: 1. Turn it up when you need the tea. 🍵
• -+, --options file — reads command line options from file. Yes, the plus sign is invited. ➕
• -s, --sign — creates PKCS#7 signed-data. Signing slay. ✍️
• -u, --verify — verifies PKCS#7 signed-data. Vibe check, but cryptographic. ✅
• -e, --encrypt — creates PKCS#7 enveloped-data. Wrap it up. 🎁
• -e, --decrypt — decrypts PKCS#7 enveloped-data. Unwrap it. 🎀
• -p, --show — shows information about the PKCS#7 container and lists certificates. Show-and-tell, but make it certificates. 👀
• -i, --in file — the PKCS#7 input file. If it's not given, input is read from STDIN. No file? STDIN is right there. 📥
• -k, --key file — private key used for --sign and --decrypt. Guard this one with your life. 🔑
• -c, --cert file — certificate for --sign, --verify and --encrypt. Can be used multiple times. Stack 'em, bestie. 📜
• -g, --digest digest — digest to use for signature creation. One of md5, sha1, sha224, sha256, sha384, or sha512. The default is determined based on the type and size of the signature key. Choose your fighter. 🥊
• -R, --rsa-padding padding — padding to use for RSA signatures. Either pkcs1 or pss, defaults to pkcs1. Padding choices, but make it RSA. 🧚

ngl, the page lists -e for both --encrypt and --decrypt — I'm keeping that exactly as printed, no edits, no cap. 💀

🌈 SEE ALSO 🌈

• pki(1) — the mothership manual, go read it too. 🛸

---

xoxo, your Unix bestie 💖 — signing off with main character energy. This page was strongSwan version 6.1.0, dated 2023-03-30.