STRONGSWAN_PKI---VERIFY(1)

✨ PKI --VERIFY(1) ✨

okay bestie, so this is a page from the strongSwan manual — it's literally called PKI --VERIFY(1) and it's all about checking whether a certificate is actually legit. no cap, this one is short but it's giving important. 🎀

---

🌸 NAME 🌸

pki --verify — verify a certificate using a CA certificate 💅

---

🦋 SYNOPSIS 🦋

pki --verify [--in file] [--cacert file] [--crl file] [--debug level]
             [--online]

pki --verify --options file

pki --verify -h | --help

---

💖 DESCRIPTION 💖

so this is a sub-command of pki(1), right? and what it does is it verifies a certificate using an optional CA certificate. that's the whole vibe. that's the job. 🫶

---

✨ OPTIONS ✨

• -h, --help — prints the usage info plus a lil summary of all the options you can use. iconic behaviour honestly.
• -v, --debug level — sets the debug level. default is 1, so if you want the tea, crank it up.
• -+, --options file — reads command line options straight out of a file. yes the flag is literally -+. slay.
• -i, --in file — the X.509 certificate you wanna verify. if you don't pass this, it just reads from STDIN, easy peasy.
• -c, --cacert file — the CA certificate used for trustchain verification. if you don't give one, the cert is assumed to be self-signed. it may optionally be a path to a directory, and CA certificates get loaded from there. and yes — you can use this one multiple times. 🔥
• -l, --crl file — a local CRL used for trustchain verification. same deal, it may optionally be a path to a directory and CRLs get loaded from there. can be used multiple times too. heads up tho: this implies -o.
• -o, --online — turns on online CRL/OCSP revocation checking. 🌐

---

👑 EXIT STATUS 👑

so the exit status is telling you a whole story, okay, listen up:

• 0 — the certificate was verified successfully. we love to see it. 💖
• 1 — the certificate is untrusted. 😭
• 2 — the certificate's lifetimes are invalid. 💀
• 3 — the certificate was verified successfully, BUT the online revocation check said it has been revoked. not the plot twist we wanted. 🙈

---

🌈 SEE ALSO 🌈

pki(1)

---

and that's the whole page bestie!! 🧚 this was PKI --VERIFY(1) from strongSwan, version 6.0.7, dated 2016-08-19 — yeah she's an old queen but she still ate 👑✨ bye ily go verify something 🫶💜