PSKCTOOL(1)

📦
version 2.6.15 · 5 versions
, in arch rolling

💅 PSKCTOOL(1) — the portable symmetric key container tool, but make it fashion ✨

okay bestie, so pskctool is from the OATH Toolkit situation and it's literally the main character for handling Portable Symmetric Key Container (PSKC) data. no cap, it's giving crypto admin energy and we're obsessed 🎀

🦋 SYNOPSIS 🦋

pskctool [OPTION]... [FILE]...

like, you throw some options at it, maybe some files, and she eats. periodt.

💖 DESCRIPTION 💖

so what does she actually do?? she manipulates Portable Symmetric Key Container (PSKC) data, which is a whole vibe. ✨

this tool lets you parse, print, validate, sign and verify PSKC data. the input comes from FILE or from standard input, so you can pipe it in if that's your thing 🫶

here's the tea on all the flags, no skips, no cuts 💅

  • -h, --help — prints help and dips out. iconic behavior.
  • -V, --version — prints the version and exits. quick lil flex.
  • --strict — fails hard on a PSKC parse error (default=off). like she will NOT be ignoring your malformed input, bestie 😭
  • -d, --debug — shows debug messages on stderr (default=off). for when you wanna see the behind-the-scenes 🕵️‍♀️
  • -q, --quiet — quiet operation (default=off). shhh 🤫
  • -v, --verbose — produces more output (default=off). she's a yapper, love that for her 💬
⚠️ okay so this part is important: selecting one of the following modes is required. you literally cannot skip this step, it's not optional, it's giving mandatory attendance.

🌸 Mode: info 🌸

  • -i, --info — parses and prints a human readable summary of the PSKC input (default=off). it's giving "explain it to me like I'm your bestie" 💁‍♀️

🌈 Mode: validate 🌈

  • -e, --validate — validates the PSKC input against XML Schema (default=off). she's checking your work against the rubric, respectfully 📋

⭐ Mode: sign ⭐

digitally signs PSKC data — main character energy only 🔥

  • --sign — signs the PSKC input (default=off). put your name on it, queen 👑
  • --sign-key=FILE — the private key to sign with. keep this safe, fr fr 🔐
  • --sign-crt=FILE — the X.509 certificate to sign with. the paperwork that goes with the vibe 📜

🧚 Mode: verify 🧚

verifies digitally signed PSKC data — trust but verify, iykyk 💜

  • --verify — verifies signed PSKC input (default=off). proof or it didn't happen 💅
  • --verify-crt=FILE — the trusted X.509 certificate for verification. your trusted source, no cap 🫶

✨ EXAMPLES ✨

the tutorial lives here, go read it, it's lowkey a whole education:

See <https://oath-toolkit.codeberg.page/libpskc-api/pskc-tutorial-pskctool.html>.

🎀 AUTHOR 🎀

written by Simon Josefsson. king behavior, we stan 🌟

💀 REPORTING BUGS 💀

found a bug?? spill the tea, don't just suffer in silence:

Copyright © 2026 Simon Josefsson. License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.

this is free software: you are free to change and redistribute it. there is NO WARRANTY, to the extent permitted by law. like, none. zero. don't come for her if something breaks 🙈

and that's the whole manual, bestie — no details left behind, every flag accounted for, she's thorough AND cute 💖

so yeah, this was OATH Toolkit 2.6.15, dated October 2026, and honestly? iconic. slay. periodt. 🦋✨🎀

📦 where this page comes from