STRONGSWAN_PKI---PKCS7(1)

💖 pki --pkcs7 — the PKCS#7 wrap/unwrap era 💖

okay bestie, so this is a sub-command of pki(1) from the strongSwan manual (that's the PKI --PKCS7(1) page, if you're keeping receipts), and it is literally your one-stop shop for wrapping and unwrapping PKCS#7 containers. PKCS#7 my beloved 🎀

---

✨ SYNOPSIS ✨

pki --pkcs7 --sign|--verify|--encrypt|--decrypt|--show [--in file]
            [--cert file] [--key file] [--digest digest]
            [--rsa-padding padding] [--debug level]

pki --pkcs7 --options file

pki --pkcs7 -h | --help

---

🌸 DESCRIPTION 🌸

So this sub-command of pki(1) gives you the functions to wrap and unwrap PKCS#7 containers. That's it, that's the job. Wrap. Unwrap. Slay. 💅

---

🦋 OPTIONS 🦋

• -h, --help — prints usage info plus a lil summary of everything you can do. your girl is helpful like that 🫶
• -v, --debug level — sets the debug level. default: 1. turn it up if you want to see everything, no cap.
• -+, --options file — reads the command line options from file. yes the flag is literally -+. iconic behaviour only ✨
• -s, --sign — creates PKCS#7 signed-data. put a signature on it, it's giving certified.
• -u, --verify — verifies PKCS#7 signed-data. vibe check on that signature, fr fr.
• -e, --encrypt — creates PKCS#7 enveloped-data. wrap it up, it's a gift 🎁
• -e, --decrypt — decrypts PKCS#7 enveloped-data. and yes bestie, -e is used for both --encrypt and --decrypt in the original — that's not me being messy, that's just how it's written 😭 don't come for me.
• -p, --show — shows information about the PKCS#7 container, and lists the certificates. the gossip option, lowkey 👑
• -i, --in file — the PKCS#7 input file. if you don't give it one, the input gets read from STDIN. so it's flexible like that.
• -k, --key file — the private key used for --sign and --decrypt. keep it secret, keep it safe 🔐
• -c, --cert file — the certificate for --sign, --verify and --encrypt. and the way that it can be used multiple times? obsessed. stack those certs 💖
• -g, --digest digest — the digest to use when creating the signature. one of md5, sha1, sha224, sha256, sha384, or sha512. the default is determined based on the type and size of the signature key — so it picks for you, main character energy.
• -R, --rsa-padding padding — the padding to use for RSA signatures. either pkcs1 or pss, and it defaults to pkcs1. no thoughts, just padding.

---

👀 SEE ALSO 👀

• pki(1)

---

strongSwan 6.0.7, dated 2023-03-30 — that's the whole page bestie, go forth and wrap/unwrap responsibly 💜🦋✨