Table of Contents
Advertisement
Usage
Table 12-1 Description of options and arguments (Continued)
-l
pqgfile
-q
size
-s
-t rsa|dsa
-w password-file
Usage
Key Database Tool's capabilities are grouped as follows, using these combinations
of options and arguments. The specifications in square brackets are optional, those
without square brackets are required.
•
Creating a new
-N [-d
•
Changing the password to a key database file:
-C [-d
•
Generating new RSA key pairs in a key database file:
-G [-h
[-f
•
Generating new DSA key pairs in a key database file:
-G [-h
[-d
•
Listing the keyIDs of the keys in a database:
-L [-a] [-l] [-t rsa|dsa] [-h
80
Netscape Certificate Management System Command-Line Tools Guide • October 2001
List DSA as well as RSA keys when listing keys in the key database.
Read an alternate PQG value from the specified file when generating DSA key
pairs. If this argument is not used, Key Database Tool generates its own PQG
value. PQG files are created with a separate DSA utility.
Set a key size to use when generating new public and private key pairs. The
minimum is 256 bits and the maximum is 1024 bits. The default is 1024
bits. Any size between the minimum and maximum is allowed.
Specify the type of a key, either RSA or DSA. The default value is rsa. By
specifying the type of key you can avoid mistakes caused by duplicate
shortkeyIDs.
Specify a file to automatically supply the password necessary to access a key
database. This is a plain-text file containing one password. You should not use
this argument if you are accessing an internal slot and hardware tokens that use
different passwords. Be sure to prevent unauthorized access to this file.
file and setting its password:
key3.db
keydir
password-file
] [-w
keydir
]
tokenname
] [-t rsa] [-s
noise-file
password-file
] [-w
tokenname
] -t dsa [-q
keydir
password-file
] [-w
]
num] [
exp
-e
] [-d
]
pqgfile
num
-s
]
]
tokenname
] [-d
keydir
]
keydir
]
Advertisement
Table of Contents
