p11-kit(8)

1P11-KIT(8)                      System Commands                     P11-KIT(8)
2
3
4

NAME

6       p11-kit - Tool for operating on configured PKCS#11 modules
7

SYNOPSIS

9       p11-kit list-modules
10
11       p11-kit extract ...
12
13       p11-kit server ...
14

DESCRIPTION

16       p11-kit is a command line tool that can be used to perform operations
17       on PKCS#11 modules configured on the system.
18
19       See the various sub commands below. The following global options can be
20       used:
21
22       -v, --verbose
23           Run in verbose mode with debug output.
24
25       -q, --quiet
26           Run in quiet mode without warning or failure messages.
27

LIST MODULES

29       List system configured PKCS#11 modules.
30
31           $ p11-kit list-modules
32
33       The modules, information about them and the tokens present in the
34       PKCS#11 modules will be displayed.
35

EXTRACT

37       Extract certificates from configured PKCS#11 modules.
38
39       This operation has been moved to a separate command trust extract. See
40       trust(1) for more information
41

SERVER

43       Run a server process that exposes PKCS#11 module remotely.
44
45           $ p11-kit server pkcs11:token1 pkcs11:token2 ...
46           $ p11-kit server --provider /path/to/pkcs11-module.so pkcs11:token1 pkcs11:token2 ...
47
48       This launches a server that exposes the given PKCS#11 tokens on a local
49       socket. The tokens must belong to the same module. To access the
50       socket, use p11-kit-client.so module. The server address and PID are
51       printed as a shell-script snippet which sets the appropriate
52       environment variable: P11_KIT_SERVER_ADDRESS and P11_KIT_SERVER_PID.
53

EXTRACT TRUST

55       Extract standard trust information files.
56
57       This operation has been moved to a separate command trust
58       extract-compat. See trust(1) for more information
59

REMOTE

61       Run a PKCS#11 module remotely.
62
63           $ p11-kit remote /path/to/pkcs11-module.so
64           $ p11-kit remote pkcs11:token1 pkcs11:token2 ...
65
66       This is not meant to be run directly from a terminal. But rather in a
67       remote option in a pkcs11.conf(5) file.
68
69       This exposes the given PKCS#11 module or tokens over standard input and
70       output. Those two forms, whether to expose a module or tokens, are
71       mutually exclusive and if the second form is used, the tokens must
72       belong to the same module.
73

BUGS

75       Please send bug reports to either the distribution bug tracker or the
76       upstream bug tracker at https://github.com/p11-glue/p11-kit/issues/.
77