smime_keys(1)

💌 smime_keys(1) — bestie edition 🎀

okay so welcome to smime_keys, a page from the User Manuals section, and honestly? she's lowkey a baddie. she keeps your S/MIME certificates organized and she does NOT get enough credit for it. let's get into it ✨

🌸 NAME 🌸

smime_keys — the utility that adds an S/MIME certificate to the internal database that mutt uses. that's it, that's the whole job, and she does it flawlessly 💅

🦋 SYNOPSIS 🦋

smime_keys <operation>  [file(s) | keyID [file(s)]]

so you give her an operation, and then depending on the vibe of that operation you either hand her some file(s), or a keyID, or a keyID followed by file(s). no cap, that's the shape of it 🫶

🌈 DESCRIPTION 🌈

the whole point of this tool is to manipulate the internal database of S/MIME certificates that mutt uses — like, for two specific things: to sign mail messages that are about to be sent, and to verify mail messages that were received and signed with S/MIME. two jobs, one database, main character energy fr fr 👑

✨ OPTIONS ✨

here's where it gets good. every operation, one by one, no skipping, because we don't gatekeep here 💖

• init — no files needed, she just inits the directory structure. clean slate, fresh start, we love a beginning 🌱
• refresh — no files needed either. she refreshes the index files, and that includes the trust flag and expiration. it's giving "self care Sunday" tbh 🧖
• list — lists the certificates stored in the database. just a little show-and-tell of everything you've collected ⭐
• label — keyID required. she changes, removes, or adds a label. pick your fighter, she can do all three 🙈
• remove — keyID required. bye bestie, we're removing that one 💀
• verify — 1 = keyID and optionally 2 = CRL. she verifies the certificate chain, and optionally whether this certificate is included in the supplied CRL (PEM format). Note: if you want to verify all certificates at the same time, just replace keyID with all. efficiency queen 🔥
• add_cert — certificate required. hand over the cert and she'll add it 🎀
• add_chain — three files required: 1 = Key, 2 = certificate plus 3 = intermediate certificate(s). a little trio, a little squad, all three or nothing 🫶
• add_p12 — one file required. adds the keypair to the database. the file is PKCS12 (like, e.g. an export from netscape). vintage but valid 💜
• add_pem — one file required. adds the keypair to the database. (this file was converted from, e.g., PKCS12.) glow-up complete ✨
• add_root — one file required. adds a PEM root certificate to the location specified within muttrc (that's the smime_verify_* command). roots need love too 🌳

💀 NO WARRANTIES 💀

okay bestie, serious moment, we have to talk about this one. this program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY — without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. so like, no promises, okay? see the GNU General Public License for more details.

Mutt Home Page: http://www.mutt.org/

not me being legally required to tell you she comes as-is 😭 read the license, it's literally right there, iykyk

and that's the whole page, bestie!! this one came to you from the Unix manual, dated September 19, 2020, and yeah — it's smime_keys(1). periodt. 💅🌸🦋