2 * Copyright (c) 2005 - 2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 /* $Id: hxtool-commands.in 21343 2007-06-26 14:21:55Z lha $ */
36 name = "cms-create-sd"
41 argument = "certificate-store"
42 help = "certificate stores to pull certificates from"
48 argument = "signer-friendly-name"
49 help = "certificate to sign with"
54 argument = "certificate-store"
55 help = "trust anchors"
60 argument = "certificate-pool"
61 help = "certificate store to pull certificates from"
67 help = "password, prompter, or environment"
73 help = "oid that the peer support"
79 help = "content type oid"
84 help = "wrapped out-data in a ContentInfo"
89 help = "wrap out-data in PEM armor"
92 long = "detached-signature"
94 help = "create a detached signature"
99 help = "use subject name for CMS Identifier"
103 argument="in-file out-file"
104 help = "Wrap a file within a SignedData object"
107 name = "cms-verify-sd"
111 argument = "certificate-store"
112 help = "trust anchors"
118 argument = "certificate-store"
119 help = "certificate store to pull certificates from"
124 argument = "password"
125 help = "password, prompter, or environment"
128 long = "missing-revoke"
130 help = "missing CRL/OCSP is ok"
133 long = "content-info"
135 help = "unwrap in-data that's in a ContentInfo"
138 long = "signed-content"
140 help = "file containing content"
144 argument="in-file out-file"
145 help = "Verify a file within a SignedData object"
148 name = "cms-unenvelope"
153 argument = "certificate-store"
154 help = "certificate used to decrypt the data"
159 argument = "password"
160 help = "password, prompter, or environment"
163 long = "content-info"
165 help = "wrapped out-data in a ContentInfo"
168 argument="in-file out-file"
169 help = "Unenvelope a file containing a EnvelopedData object"
172 name = "cms-envelope"
173 function = "cms_create_enveloped"
178 argument = "certificate-store"
179 help = "certificates used to receive the data"
184 argument = "password"
185 help = "password, prompter, or environment"
188 long = "encryption-type"
194 long = "content-type"
197 help = "content type oid"
200 long = "content-info"
202 help = "wrapped out-data in a ContentInfo"
205 argument="in-file out-file"
206 help = "Envelope a file containing a EnvelopedData object"
210 function = "pcert_verify"
214 argument = "password"
215 help = "password, prompter, or environment"
218 long = "allow-proxy-certificate"
220 help = "allow proxy certificates"
223 long = "missing-revoke"
225 help = "missing CRL/OCSP is ok"
230 help = "time when to validate the chain"
236 help = "verbose logging"
241 help = "maximum search length of certificate trust anchor"
246 help = "match hostname to certificate"
248 argument = "cert:foo chain:cert1 chain:cert2 anchor:anchor1 anchor:anchor2"
249 help = "Verify certificate chain"
253 function = "pcert_print"
257 argument = "password"
258 help = "password, prompter, or environment"
263 help = "print the content of the certificates"
268 help = "print the information about the certificate store"
271 argument="certificate ..."
272 help = "Print certificates"
276 function = "pcert_validate"
280 argument = "password"
281 help = "password, prompter, or environment"
284 argument="certificate ..."
285 help = "Validate content of certificates"
288 name = "certificate-copy"
293 argument = "password"
294 help = "password, prompter, or environment"
299 argument = "password"
300 help = "password, prompter, or environment"
303 argument="in-certificates-1 ... out-certificate"
304 help = "Copy in certificates stores into out certificate store"
311 argument = "password"
312 help = "password, prompter, or environment"
317 argument = "certificate"
318 help = "certificate use to sign the request"
324 help = "part after host in url to put in the request"
330 help = "don't include nonce in request"
335 argument = "certificate-store"
336 help = "pool to find parent certificate in"
339 argument="outfile certs ..."
340 help = "Fetch OCSP responses for the following certs"
350 argument="certificates ..."
351 help = "Check that certificates are in OCSP file and valid"
361 argument="ocsp-response-file ..."
362 help = "Print the OCSP responses"
365 name = "request-create"
374 help = "Email address in SubjectAltName"
379 help = "Hostname or domainname in SubjectAltName"
384 help = "Type of request CRMF or PKCS10, defaults to PKCS10"
392 long = "generate-key"
399 help = "number of bits in the generated key";
404 help = "verbose status"
408 argument="output-file"
409 help = "Create a CRMF or PKCS10 request"
412 name = "request-print"
416 help = "verbose printing"
419 argument="requests ..."
420 help = "Print requests"
432 help = "search for private key"
435 long = "friendlyname"
438 help = "match on friendly name"
441 long = "keyEncipherment"
443 help = "match keyEncipherment certificates"
446 long = "digitalSignature"
448 help = "match digitalSignature certificates"
453 help = "print matches"
458 argument = "password"
459 help = "password, prompter, or environment"
462 argument="certificates ..."
463 help = "Query the certificates for a match"
472 help = "Generates random bytes and prints them to standard output"
478 help = "type of CMS algorithm"
480 name = "crypto-available"
482 help = "Print available CMS crypto types"
488 help = "type of CMS algorithm"
493 help = "source certificate limiting the choices"
496 long = "peer-cmstype"
498 help = "peer limiting cmstypes"
500 name = "crypto-select"
502 help = "Print selected CMS type"
509 help = "decode instead of encode"
512 function = "hxtool_hex"
514 help = "Encode input to hex"
520 help = "Issue a CA certificate"
525 help = "Issue a proxy certificate"
528 long = "domain-controller"
530 help = "Issue a MS domaincontroller certificate"
535 help = "Subject of issued certificate"
538 long = "ca-certificate"
540 help = "Issuing CA certificate"
545 help = "Issuing a self-signed certificate"
548 long = "ca-private-key"
550 help = "Private key for self-signed certificate"
555 help = "Issued certificate"
560 help = "Type of certificate to issue"
565 help = "Lifetime of certificate"
568 long = "serial-number"
570 help = "serial-number of certificate"
576 help = "Maximum path length (CA and proxy certificates), -1 no limit"
581 help = "DNS names this certificate is allowed to serve"
586 help = "email addresses assigned to this certificate"
589 long = "pk-init-principal"
591 help = "PK-INIT principal (for SAN)"
596 help = "Microsoft UPN (for SAN)"
601 help = "XMPP jabber id (for SAN)"
606 help = "certificate request"
609 long = "certificate-private-key"
614 long = "generate-key"
621 help = "number of bits in the generated key"
629 long = "template-certificate"
634 long = "template-fields"
638 name = "certificate-sign"
640 name = "issue-certificate"
642 function = "hxtool_ca"
644 help = "Issue a certificate"
651 argument = "password"
652 help = "password, prompter, or environment"
657 help = "verbose printing"
660 argument="certificates..."
661 help = "Test crypto system related to the certificates"
667 help = "type of statistics"
669 name = "statistic-print"
671 help = "Print statistics"
677 help = "signer certificate"
682 argument = "password"
683 help = "password, prompter, or environment"
688 help = "CRL output file"
693 help = "time the crl will be valid"
697 argument="certificates..."
698 help = "Create a CRL"
703 argument = "[command]"
706 help = "Help! I need somebody"