Table of Contents
Advertisement
Syntax
Syntax
To run Key Database Tool, type the command
keyutil
where option and arguments are combinations of the options and arguments listed
in the following section. Each command takes one option. Each option may take
zero or more arguments. To see a usage string, issue the command without
options, or with the
Options and Arguments
Options specify an action and are uppercase. Option arguments modify an action
and are lowercase. Key Database Tool options and their arguments are defined as
follows:
Table 12-1 Description of options and arguments
Option
-N
-C
-G
-L
-P
78
Netscape Certificate Management System Command-Line Tools Guide • October 2001
option [arguments]
option.
-H
Description
Create a new key database and set its password.
Use the -h tokenname argument to specify a specific hardware or software token
in which to create the new database.
Change the password to a key database.
Generate a new public and private key pair within a database. The key database
should already exist; if one is not present, this option will initialize one by
default.
Some smart cards (for example, the Litronic card) can store only one key pair. If
you create a new key pair for such a card, the previous pair is overwritten.
List the keyID of keys in the key database. A keyID is the modulus of the RSA
key or the publicValue of the DSA key. IDs are displayed in hexadecimal
("0x" is not shown).
You can identify keys by a shortkeyID. The shortkeyID is the first few bytes of
the keyID, starting from the second byte, with a length sufficient to identify it
uniquely.
Use the -a argument to list keys of all tokens. Otherwise the list will contain
only keys in the default (internal) slot.
Use the -l argument to list DSA as well as RSA keys.
Display public key information on the screen.
Advertisement
Table of Contents
