{"id":3088,"date":"2022-12-20T16:43:27","date_gmt":"2022-12-20T19:43:27","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/p11kit-man8\/"},"modified":"2022-12-20T16:43:27","modified_gmt":"2022-12-20T19:43:27","slug":"p11kit-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/p11kit-man8\/","title":{"rendered":"P11−KIT (man8)"},"content":{"rendered":"

P11\u2212KIT<\/h1>\n

NAME<\/a>
SYNOPSIS<\/a>
DESCRIPTION<\/a>
LIST MODULES<\/a>
EXTRACT<\/a>
SERVER<\/a>
EXTRACT TRUST<\/a>
REMOTE<\/a>
BUGS<\/a>
SEE ALSO<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

p11-kit \u2212 Tool for operating on configured PKCS#11 modules<\/p>\n

SYNOPSIS <\/a> <\/h2>\n\n\n
<\/td>\n\n

p11\u2212kit list\u2212modules<\/b><\/p>\n<\/td>\n

 <\/td>\n<\/tr>\n<\/table>\n\n\n\n
<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n\n

p11\u2212kit extract<\/b> …<\/p>\n<\/td>\n

 <\/td>\n<\/tr>\n<\/table>\n\n\n\n
<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n\n

p11\u2212kit server<\/b> …<\/p>\n<\/td>\n

 <\/td>\n<\/tr>\n<\/table>\n

DESCRIPTION <\/a> <\/h2>\n

p11\u2212kit<\/b> is a command line tool that can be used to perform operations on PKCS#11 modules configured on the system.<\/p>\n

See the various sub commands below. The following global options can be used:<\/p>\n

\u2212v, \u2212\u2212verbose<\/b><\/p>\n

Run in verbose mode with debug output.<\/p>\n

\u2212q, \u2212\u2212quiet<\/b><\/p>\n

Run in quiet mode without warning or failure messages.<\/p>\n

LIST MODULES <\/a> <\/h2>\n

List system configured PKCS#11 modules.<\/p>\n

$ p11\u2212kit list\u2212modules<\/p>\n

The modules, information about them and the tokens present in the PKCS#11 modules will be displayed.<\/p>\n

EXTRACT <\/a> <\/h2>\n

Extract certificates from configured PKCS#11 modules.<\/p>\n

This operation has been moved to a separate command trust extract<\/b>. See trust<\/b>(1) for more information<\/p>\n

SERVER <\/a> <\/h2>\n

Run a server process that exposes PKCS#11 module remotely.<\/p>\n

$ p11\u2212kit server pkcs11:token1 pkcs11:token2 …
$ p11\u2212kit server \u2212\u2212provider \/path\/to\/pkcs11\u2212module.so pkcs11:token1 pkcs11:token2 …<\/p>\n

This launches a server that exposes the given PKCS#11 tokens on a local socket. The tokens must belong to the same module. To access the socket, use p11\u2212kit\u2212client.so module. The server address and PID are printed as a shell\u2212script snippet which sets the appropriate environment variable: P11_KIT_SERVER_ADDRESS and P11_KIT_SERVER_PID.<\/p>\n

EXTRACT TRUST <\/a> <\/h2>\n

Extract standard trust information files.<\/p>\n

This operation has been moved to a separate command trust extract\u2212compat<\/b>. See trust<\/b>(1) for more information<\/p>\n

REMOTE <\/a> <\/h2>\n

Run a PKCS#11 module remotely.<\/p>\n

$ p11\u2212kit remote \/path\/to\/pkcs11\u2212module.so
$ p11\u2212kit remote pkcs11:token1 pkcs11:token2 …<\/p>\n

This is not meant to be run directly from a terminal. But rather in a remote<\/b> option in a pkcs11.conf<\/b>(5) file.<\/p>\n

This exposes the given PKCS#11 module or tokens over standard input and output. Those two forms, whether to expose a module or tokens, are mutually exclusive and if the second form is used, the tokens must belong to the same module.<\/p>\n

BUGS <\/a> <\/h2>\n

Please send bug reports to either the distribution bug tracker or the upstream bug tracker at https:\/\/github.com\/p11\u2212glue\/p11\u2212kit\/issues\/<\/font><\/b>.<\/font><\/p>\n

SEE ALSO <\/a> <\/h2>\n

pkcs11.conf<\/b>(5)<\/font><\/p>\n

Further details available in the p11\u2212kit online documentation at<\/font> https:\/\/p11\u2212glue.github.io\/p11\u2212glue\/p11\u2212kit\/manual\/<\/font><\/b>.<\/font><\/p>\n

\n","protected":false},"excerpt":{"rendered":"

p11-kit \u2212 Tool for operating on configured PKCS#11 modules <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,237],"class_list":["post-3088","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-p11-kit"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3088"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3088\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}