Netscape MANAGEMENT SYSTEM 6.1 - COMMAND-LINE Manual page 14

Table 1-1 Summary of command-line utilities (Continued)
Utility/Tool
ExtJoiner (Extension Joiner Tool)
GenExtKeyUsage (Key Usage
Extension Tool)
GenIssuerAltNameExt (Issuer
Alternative Name Extension Tool)
GenSubjectAltNameExt (Subject
Alternative Name Extension Tool)
PasswordCache
(Password Cache Utility)
PQGGen (PQG Generation Tool)
PrettyPrintCert
(Pretty Print Certificate Tool)
PrettyPrintCrl
(Pretty Print CRL Tool)
Executable tools located under <server_root>/bin/cert/tools:
14 Netscape Certificate Management System Command-Line Tools Guide • February 2003
Function
A command line utility utilized to join a sequence of extensions
together so that the final output can be used in the configuration
wizard for specifying extra extensions in default certificates (i. e. -
CA certificate, SSL certificate). For details, see Chapter 6,
"Extension Joiner Tool."
A command line utility utilized to generate a DER-encoded
Extended Key Usage extension. The first parameter is the
criticality of the extension, true or false. The OIDs to be included
in the extension are passed as command-line arguments. The
OIDs are described in RFC 2459. For example, the OID for code
signing is 1.3.6.1.5.5.7.3.3.
A command line utility utilized to generate an issuer alternative
name extension in base-64 encoding. The encoding output can be
used with the configuration wizard, using parameter pairs where
the first parameter specifies the general type from among
"DNSName", "EDIPartyName", "IPAddressName", "URIName",
"RFC822Name", "OIDName", or "X500Name", and the second
parameter specifies a general name for this type.
A command line utility utilized to generate a subject alternative
name extension in base-64 encoding. The encoding output can be
used with the configuration wizard, using parameter pairs where
the first parameter specifies the general type from among
"DNSName", "EDIPartyName", "IPAddressName", "URIName",
"RFC822Name", "OIDName", or "X500Name", and the second
parameter specifies a general name for this type.
Manipulates the contents of the single sign-on password cache.
For details, see Chapter 3, "Password Cache Utility."
A command line utility utilized to generate the P, Q, and G values
required by the DSA algorithm. See RFC 2459, section 7.3.3: DSA
Signature Keys for more information.
Prints the contents of a certificate stored as ASCII base-64 encoded
data in a human-readable form. For details, see Chapter 10,
"Pretty Print Certificate Tool."
Prints the contents of a CRL stored as ASCII base-64 encoded data
in a human-readable form. For details, see Chapter 11, "Pretty
Print CRL Tool."