1OPENPGP-TOOL(1) OpenSC Tools OPENPGP-TOOL(1)
2
3
4
6 openpgp-tool - utility for accessing visible data OpenPGP smart cards
7 and compatible tokens
8
10 openpgp-tool [OPTIONS]
11
13 The openpgp-tool utility is used for accessing data from the OpenPGP
14 v1.1 and v2.0 smart cards and compatible tokens like e.g. GPF
15 CryptoStick v1.x, which might not be present in PKCS#15 objects but
16 available in custom files on the card. The data can be printed on
17 screen or used by other programs via environment variables.
18
20 --card-info, -C
21 Show card information.
22
23 --del-key arg
24 Delete key indicated by arg. arg can be 1, 2, 3, or all.
25
26 --do arg, -d arg
27 Dump private data object (DO) indicated by arg. arg can be in the
28 form x, 10x, or 010x to access DO 010x, where x is 1, 2, 3, or 4.
29
30 --erase, -E
31 Erase (i.e. reset) the card.
32
33 --exec prog, -x prog
34 Execute the given program with data in environment variables.
35
36 --gen-key arg, -G arg
37 Generate key with the ID given as arg. arg can be one of 1, 2, or
38 3.
39
40 --help, -h
41 Print help message on screen.
42
43 --key-info, -K
44 Show information of keys on the card.
45
46 --key-type keytype, -t keytype
47 Specify the type of the key to be generated. Supported values for
48 keytype are rsa for RSA with 2048 bits, rsaLENGTH for RSA with a
49 bit length of LENGTH. If not given, it defaults to rsa2048.
50
51 --pin pin
52 This option can be used to specify the PIN value on the command
53 line. If the value is set to env:VARIABLE, the value of the
54 specified environment variable is used. By default, the code is
55 prompted on the command line if needed.
56
57 Note that on most operation systems, any user can display the
58 command line of any process on the system using utilities such as
59 ps(1). Therefore, you should prefer passing the codes via an
60 environment variable on an unsecured system.
61
62 --pretty
63 Print values in pretty format.
64
65 --raw
66 Print values in raw format, as they are stored on the card.
67
68 --reader arg, -r arg
69 Number of the reader to use. By default, the first reader with a
70 present card is used. If arg is an ATR, the reader with a matching
71 card will be chosen.
72
73 --user-info, -U
74 Show card holder information.
75
76 --verify pintype
77 Verify PIN (CHV1, CHV2 or CHV3).
78
79 --version, -V
80 Print the version of the utility and exit.
81
82 --verbose, -v
83 Verbose operation. Use several times to enable debug output.
84
85 --wait, -w
86 Wait for a card to be inserted.
87
89 openpgp-tool utility was written by Peter Marschall <peter@adpm.de>.
90
91
92
93opensc 11/24/2020 OPENPGP-TOOL(1)