1PKI --KEYID(1)                    strongSwan                    PKI --KEYID(1)
2
3
4

NAME

6       pki --keyid - Calculate key identifiers of a key or certificate
7

SYNOPSIS

9       pki --keyid [--in file|--keyid hex] [--type type] [--id id-type]
10                   [--format format] [--debug level]
11
12       pki --keyid --options file
13
14       pki --keyid -h | --help
15

DESCRIPTION

17       This sub-command of pki(1) calculates key identifiers of  private  keys
18       and certificates.
19

OPTIONS

21       -h, --help
22              Print usage information with a summary of the available options.
23
24       -v, --debug level
25              Set debug level, default: 1.
26
27       -+, --options file
28              Read command line options from file.
29
30       -i, --in file
31              Input file. If not given the input is read from STDIN.
32
33       -x, --keyid hex
34              Smartcard or TPM private key object handle in hex format with an
35              optional 0x prefix.
36
37       -t, --type type
38              Type of input. One of priv (private key), rsa (RSA private key),
39              ecdsa  (ECDSA private key), bliss (BLISS private key), pub (pub‐
40              lic key), pkcs10 (PKCS#10 certificate request), x509 (X.509 cer‐
41              tificate), defaults to priv.
42
43       -I, --id id-type
44              Type  of  identifier.  One  of all (all identifiers), spk (SHA-1
45              hash of subjectPublicKey), spki (SHA-1 hash of subjectPublicKey‐
46              Info), defaults to all.
47
48       -f, --format format
49              Output  format. One of pretty (user-readable output), hex (hexa‐
50              decimal encoding), base64 (Base64  encoding),  bin  (raw  binary
51              data), defaults to pretty.
52

EXAMPLES

54       Calculate key identifiers of an RSA private key:
55
56         $ pki --keyid --in key.der
57         subjkey (SHA-1 of subjectPublicKey):
58                      6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
59         keyid (SHA-1 of subjectPublicKeyInfo):
60                      6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...
61
62       Calculate key identifiers of an X.509 certificate:
63
64         $ pki --keyid --in cert.der --type x509
65         subjkey (SHA-1 of subjectPublicKey):
66                      6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
67         keyid (SHA-1 of subjectPublicKeyInfo):
68                      6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...
69
70       Calculate keyid in simple hex encoding of an X.509 certificate:
71
72         $ pki --keyid --in cert.der --type x509 --id spki --format hex
73         6e55dc7e9ca558d95be3c71314e1...
74

SEE ALSO

76       pki(1)
77
78
79
805.9.1                             2019-04-29                    PKI --KEYID(1)
Impressum