STRONGSWAN_PKI---PRINT(1)

✨ pki --print(1) — the strongSwan girlie's guide ✨

okay so bestie, you're in the PKI --PRINT(1) section of the strongSwan manual and honestly? this one is a serve. it's the part where your keys, certs and assorted cryptographic little meow-meows get turned into something your human eyeballs can actually read 💖

---

🌸 NAME 🌸

pki --print — print a credential (key, certificate etc.) in human readable form

no cap, that's the whole gig. it takes a credential and makes it legible. the way that it just… translates? iconic. 🎀

---

🦋 SYNOPSIS 🦋

pki --print [--in file|--keyid hex] [--type type] [--debug level]

pki --print --options file

pki --print -h | --help

so yeah, three whole moods. one for actually printing stuff, one for reading your options out of a file like a fancy person, and one for just asking for help. we love options. 💅

---

🌈 DESCRIPTION 🌈

This sub-command of pki(1) prints credentials (keys, certificates etc.) in human readable form.

that's it. that's the whole vibe. it's the translator between "cryptographic blob that means nothing to you" and "oh wait I can actually read this". main character energy fr fr ✨

---

💖 OPTIONS 💖

• -h, --help — prints the usage info plus a lil summary of every option you've got available. your safety net, your bestie, your emotional support flag 🙈
• -v, --debug level — sets the debug level. default is 1. turn it up when you wanna see everything the code is thinking about. default: 1 🫶
• -+, --options file — reads the command line options from a file instead of you typing them all out like a peasant. yes, the flag is literally -+. slay. 🎀
• -i, --in file — the input file. and if you don't give it one? it just reads from STDIN instead, because it's flexible like that. 💅
• -x, --keyid hex — smartcard or TPM private key or certificate object handle, in hex format, with an optional 0x prefix. so 0x it or don't, she's not judging. ⭐
• -t, --type type — the type of input, and ooooh bestie there's a whole menu. one of:
  • x509 — X.509 certificate
  • crl — Certificate Revocation List, CRL
  • ac — Attribute Certificate
  • pub — public key
  • priv — private key
  • rsa — RSA private key
  • ecdsa — ECDSA private key
  • ed25519 — Ed25519 private key
  • ed448 — Ed448 private key
  • ocsp-req — OCSP request
  • ocsp-rsp — OCSP response

and if you don't pick one? it defaults to x509. periodt. 👑

ngl the type list is giving extensive. that's eleven whole options. she really said "I contain multitudes" 😭

---

👑 SEE ALSO 👑

• pki(1)

go read the parent page too, it's the whole universe and this is just one gorgeous little star in it 🌟

---

and that's the tea, bestie!! this page is from strongSwan version 6.0.7, dated 2016-12-13 — so it's vintage, it's classic, it's an elder icon and we respect her 💜✨ bye ily, go print some certificates 🦋💖