uftp_keymgt(1)

💖 uftp_keymgt — key management utility 💖

okay bestie, gather round, because this is uftp_keymgt(1) from the General Commands Manual section and it is literally the little key goblin helper for the UFTP suite. 🔑✨

---

✨ NAME ✨

uftp_keymgt — Encrypted UDP based ftp with multicast — key management utility

---

🫶 SYNOPSIS 🫶

uftp_keymgt [ -m ] [ key_file [ key_file ...] ]

uftp_keymgt [ -m ] -g { rsa:key_length | ec:curve } key_file

uftp_keymgt [ -m ] -d key_file

---

🌸 DESCRIPTION 🌸

So uftp_keymgt is the utility that creates, views, and deletes RSA and EC private keys for the UFTP suite. And yes, uftp(1), uftpd(1), and uftpproxyd(1) can generate keys on the fly all by themselves, no cap — but this utility is the more straightforward way of doing it, so you don't have to spin up a whole dummy process just to create or view a key. it's giving "let me just do one thing at a time" energy and we love that for us. 💅

Now, what key_file even means depends on which crypto library UFTP was compiled against. slay, very flexible of it.

On Windows systems, UFTP uses CNG (Cryptography API: Next Generation). Under CNG, all RSA and EC private keys must be stored in a key container — technically only keys used to sign data, but for UFTP's purposes this is the case. Key containers are internal to Windows, and each user (and the system) has its own set of key containers. So in this case, key_file is actually the name of the key container. 🫙

All other systems use OpenSSL for the crypto library — although under Windows, UFTP can also be built to use it. In this case, key_file specifies a file name where the RSA or ECDSA private key is stored unencrypted in PEM format, and the OS is expected to protect this file. 🔓

bestie, fr fr: "unencrypted in PEM format" means the OS has to protect that file. it's the vibe, but guard it like your iced coffee order.

The -g option is what you use to generate a key of a given type and store it in the given key_file. The key size and key fingerprint are then printed. Under OpenSSL, a key can actually be generated by the openssl(1) command line utility — although you'll still need to run uftp_keymgt on it to see the fingerprint. iconic teamwork honestly. 🤝

The -d option is available only on Windows systems using CNG. It deletes the key container specified by key_file. bye forever 👋

When neither -g or -d are specified, the type and fingerprint of all keys listed are printed. And if no keys are specified under Windows with CNG, the private key for all key containers for the current user are printed. Note that some key containers may exist that an application other than UFTP is using, and some of those may not have an RSA or EC private key. so like... don't be shocked if you see strays. 🙈

---

🎀 OPTIONS 🎀

The following options are supported:

• -g { rsa:key_length | ec:curve } key_file — Specifies the type of new key and the key_file to store it in. New keys are specified as either rsa:key_length, which creates an RSA private key key_length bits wide, or as ec:curve, which creates an EC key using the curve "curve".

The supported EC curves are secp256r1 (prime256v1), secp384r1, and secp521r1. ⭐

• -d key_file — Specifies the Windows key container to delete. 🗑️
• -m — For Windows systems using CNG, private keys are normally stored in the key container of the running user. Specifying this option stores keys in the system key container instead. On non-Windows systems, this option has no effect. 🚫

---

🔥 EXIT STATUS 🔥

The following exit values are returned:

• 0 — The command completed successfully. ate, no crumbs. ✨
• 1 — An invalid command line parameter was specified. 😭

---

👑 SEE ALSO 👑

uftp(1), uftpd(1), uftpproxyd(1).

---

💜 NOTES 💜

The latest version of UFTP can be found at http://uftp-multicast.sourceforge.net. UFTP is covered by the GNU General Public License. Commercial licenses and support are available from Dennis Bush (bush@tcnj.edu). 📬

---

and that's the page, bestie — <rainbow>UFTP 5.0, dated 22 April 2020</rainbow>, written by the loveliest people at the UFTP project. go manage those keys, you absolute main character. 🦋💖🎀 periodt.