EUREPHIADM-CERTS(7)

πŸ’– EUREPHIADM-CERTS πŸ’–

okay bestie, so this is the eurephiadm certs manual β€” page 7, part of the eurephiadm family. it's your whole cert-management era. let's get into it. πŸŽ€


✨ NAME ✨

eurephiadm-certs β€” certificate management for eurephia πŸ¦‹


🌸 DESCRIPTION 🌸

so there's a certificate command, and it's giving ✨options✨. here are all the modes you can vibe with:

  • -A | --add β€” register a brand new certificate πŸ†•
  • -D | --delete β€” delete a certificate that's already registered πŸ—‘οΈ
  • -l | --list β€” list every single registered certificate πŸ“‹
  • -h | --help <mode> β€” help, but specifically about one mode πŸ‘€

πŸ”₯ LIST MODE πŸ”₯

the list mode lists all the registered certificates. it takes exactly one parameter:

  • -S | --sort <sort key> β€” decides the sort order of the certificate list πŸ”€

the sort keys you can use are:

  • certid β€” numeric certificate ID πŸ”’
  • depth β€” certificate depth πŸ•³οΈ
  • digest β€” certificate SHA1 digest πŸ”
  • cname β€” certificate Common Name field πŸ“›
  • org β€” certificate organisation field 🏒
  • email β€” certificate e-mail address field πŸ“§
  • registered β€” when the certificate was registered in eurephia ⏰

πŸ’… ADD MODE πŸ’…

the add mode registers a new certificate. main character energy fr fr.

  • -d | --depth β€” certificate depth, required (yes bestie, you literally cannot skip this one) ⚠️
  • -D | --digest β€” SHA1 fingerprint/digest of the new certificate πŸ”‘
  • -C | --common-name β€” Common name (CN) field of the certificate πŸ“›
  • -O | --organisation β€” Organisation (O) field of the certificate 🏒
  • -E | --email β€” e-mail address (emailAddress) of the certificate πŸ“§

so the tea on depth: usually you want the certificate depth value to be 0 if you're registering user account certificates. CA certificates usually have a value bigger than 0. iykyk. πŸ‘‘

if you actually have the certificate file on hand, you can use these next options to grab all the info you need straight out of a certificate file instead of typing it all in:

  • -f | --certfile β€” file name of the certificate file πŸ“
  • -p | --pkcs12 β€” if the file is in PKCS#12 format πŸ“¦

the default format is PEM format, unless --pkcs12 is given. and listen, these two options cannot be used together with -D, -C, -O or -E. pick a lane bestie. 🚫 but the certificate depth must still be given, to indicate the certificate depth.


πŸ—‘οΈ DELETE MODE πŸ—‘οΈ

the delete mode removes a certificate from the certificate database. it's giving spring cleaning.

  • -i | --certid β€” indicates a unique certificate ID πŸ†”
  • -d | --digest β€” a unique SHA1 fingerprint/digest value πŸ”
  • -C | --common-name β€” Common Name (CN) field of a certificate πŸ“›
  • -O | --organisation β€” Organisation (O) field of a certificate 🏒
  • -E | --email β€” e-mail address (emailAddress) of a certificate πŸ“§

you can use any of these parameters to indicate a search criteria for the certificate (or certificates) you want to delete. πŸ‘€ then you'll be provided with a list of certificates matching your search criteria, and you'll need to approve the deletion of the matching certificate(s). no accidental deletions around here, we check first. βœ…


🫢 SEE ALSO 🫢


πŸ‘‘ AUTHOR πŸ‘‘

Copyright (C) 2008-2012 David Sommerseth <dazo@users.sourceforge.net>


k bye bestie, go manage those certs responsibly πŸ’œβœ¨

this masterpiece of a page was written by David Sommerseth back in July 2010, for eurephiadm certs(7). iconic, honestly. πŸŽ€πŸ¦‹πŸŒΈ