Commit 247806c8 authored by Francis Dupont's avatar Francis Dupont
Browse files

regen

parent f89a9bcf
...@@ -12,7 +12,7 @@ ...@@ -12,7 +12,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE. .\" PERFORMANCE OF THIS SOFTWARE.
.\" .\"
.\" $Id: pkcs11-keygen.8,v 1.2 2009/10/05 12:11:53 fdupont Exp $ .\" $Id: pkcs11-keygen.8,v 1.3 2009/10/05 12:25:29 fdupont Exp $
.\" .\"
.hy 0 .hy 0
.ad l .ad l
...@@ -32,7 +32,7 @@ ...@@ -32,7 +32,7 @@
pkcs11\-keygen \- generate RSA keys on a PKCS#11 device pkcs11\-keygen \- generate RSA keys on a PKCS#11 device
.SH "SYNOPSIS" .SH "SYNOPSIS"
.HP 14 .HP 14
\fBpkcs11\-keygen\fR [\fB\-P\fR] [\fB\-m\ \fR\fB\fImodule\fR\fR] [\fB\-s\ \fR\fB\fIslot\fR\fR] {\-b\ \fIkeysize\fR} {\-l\ \fIlabel\fR} [\fB\-p\ \fR\fB\fIPIN\fR\fR] \fBpkcs11\-keygen\fR [\fB\-P\fR] [\fB\-m\ \fR\fB\fImodule\fR\fR] [\fB\-s\ \fR\fB\fIslot\fR\fR] [\fB\-e\fR] {\-b\ \fIkeysize\fR} {\-l\ \fIlabel\fR} [\fB\-i\ \fR\fB\fIid\fR\fR] [\fB\-p\ \fR\fB\fIPIN\fR\fR]
.SH "DESCRIPTION" .SH "DESCRIPTION"
.PP .PP
\fBpkcs11\-keygen\fR \fBpkcs11\-keygen\fR
...@@ -58,6 +58,11 @@ Specify the PKCS#11 provider module. This must be the full path to a shared libr ...@@ -58,6 +58,11 @@ Specify the PKCS#11 provider module. This must be the full path to a shared libr
Open the session with the given PKCS#11 slot. The default is slot 0. Open the session with the given PKCS#11 slot. The default is slot 0.
.RE .RE
.PP .PP
\-e
.RS 4
Use a large exponent.
.RE
.PP
\-b \fIkeysize\fR \-b \fIkeysize\fR
.RS 4 .RS 4
Create the key pair with Create the key pair with
...@@ -67,7 +72,12 @@ bits of modulus. ...@@ -67,7 +72,12 @@ bits of modulus.
.PP .PP
\-l \fIlabel\fR \-l \fIlabel\fR
.RS 4 .RS 4
Create key objects with the given label. Create key objects with the given label. This name must be unique.
.RE
.PP
\-i \fIid\fR
.RS 4
Create key objects with id. The id is either an unsigned short 2 byte or an unsigned long 4 byte number.
.RE .RE
.PP .PP
\-p \fIPIN\fR \-p \fIPIN\fR
...@@ -79,12 +89,11 @@ will prompt for it. ...@@ -79,12 +89,11 @@ will prompt for it.
.SH "SEE ALSO" .SH "SEE ALSO"
.PP .PP
\fBpkcs11\-list\fR(3), \fBpkcs11\-list\fR(3),
\fBpkcs11\-destroy\fR(3) \fBpkcs11\-destroy\fR(3),
\fBdnssec\-keyfromlabel\fR(3),
.SH "CAVEAT" .SH "CAVEAT"
.PP .PP
The public exponent is hard\-wired to 65537. Some PKCS#11 providers crash with big public exponent.
.PP
The command should optionally set the object ID too.
.SH "AUTHOR" .SH "AUTHOR"
.PP .PP
Internet Systems Consortium Internet Systems Consortium
......
...@@ -13,7 +13,7 @@ ...@@ -13,7 +13,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE. - PERFORMANCE OF THIS SOFTWARE.
--> -->
<!-- $Id: pkcs11-keygen.html,v 1.2 2009/10/05 12:13:15 fdupont Exp $ --> <!-- $Id: pkcs11-keygen.html,v 1.3 2009/10/05 12:25:29 fdupont Exp $ -->
<html> <html>
<head> <head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
...@@ -28,10 +28,10 @@ ...@@ -28,10 +28,10 @@
</div> </div>
<div class="refsynopsisdiv"> <div class="refsynopsisdiv">
<h2>Synopsis</h2> <h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">pkcs11-keygen</code> [<code class="option">-P</code>] [<code class="option">-m <em class="replaceable"><code>module</code></em></code>] [<code class="option">-s <em class="replaceable"><code>slot</code></em></code>] {-b <em class="replaceable"><code>keysize</code></em>} {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-p <em class="replaceable"><code>PIN</code></em></code>]</p></div> <div class="cmdsynopsis"><p><code class="command">pkcs11-keygen</code> [<code class="option">-P</code>] [<code class="option">-m <em class="replaceable"><code>module</code></em></code>] [<code class="option">-s <em class="replaceable"><code>slot</code></em></code>] [<code class="option">-e</code>] {-b <em class="replaceable"><code>keysize</code></em>} {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-i <em class="replaceable"><code>id</code></em></code>] [<code class="option">-p <em class="replaceable"><code>PIN</code></em></code>]</p></div>
</div> </div>
<div class="refsect1" lang="en"> <div class="refsect1" lang="en">
<a name="id2543384"></a><h2>DESCRIPTION</h2> <a name="id2543397"></a><h2>DESCRIPTION</h2>
<p> <p>
<span><strong class="command">pkcs11-keygen</strong></span> causes a PKCS#11 device to generate <span><strong class="command">pkcs11-keygen</strong></span> causes a PKCS#11 device to generate
a new RSA key pair with the specified <code class="option">label</code> and a new RSA key pair with the specified <code class="option">label</code> and
...@@ -39,7 +39,7 @@ ...@@ -39,7 +39,7 @@
</p> </p>
</div> </div>
<div class="refsect1" lang="en"> <div class="refsect1" lang="en">
<a name="id2543403"></a><h2>ARGUMENTS</h2> <a name="id2543416"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl> <div class="variablelist"><dl>
<dt><span class="term">-P</span></dt> <dt><span class="term">-P</span></dt>
<dd><p> <dd><p>
...@@ -59,6 +59,10 @@ ...@@ -59,6 +59,10 @@
Open the session with the given PKCS#11 slot. The default is Open the session with the given PKCS#11 slot. The default is
slot 0. slot 0.
</p></dd> </p></dd>
<dt><span class="term">-e</span></dt>
<dd><p>
Use a large exponent.
</p></dd>
<dt><span class="term">-b <em class="replaceable"><code>keysize</code></em></span></dt> <dt><span class="term">-b <em class="replaceable"><code>keysize</code></em></span></dt>
<dd><p> <dd><p>
Create the key pair with <code class="option">keysize</code> bits of Create the key pair with <code class="option">keysize</code> bits of
...@@ -67,6 +71,12 @@ ...@@ -67,6 +71,12 @@
<dt><span class="term">-l <em class="replaceable"><code>label</code></em></span></dt> <dt><span class="term">-l <em class="replaceable"><code>label</code></em></span></dt>
<dd><p> <dd><p>
Create key objects with the given label. Create key objects with the given label.
This name must be unique.
</p></dd>
<dt><span class="term">-i <em class="replaceable"><code>id</code></em></span></dt>
<dd><p>
Create key objects with id. The id is either
an unsigned short 2 byte or an unsigned long 4 byte number.
</p></dd> </p></dd>
<dt><span class="term">-p <em class="replaceable"><code>PIN</code></em></span></dt> <dt><span class="term">-p <em class="replaceable"><code>PIN</code></em></span></dt>
<dd><p> <dd><p>
...@@ -76,19 +86,19 @@ ...@@ -76,19 +86,19 @@
</dl></div> </dl></div>
</div> </div>
<div class="refsect1" lang="en"> <div class="refsect1" lang="en">
<a name="id2543520"></a><h2>SEE ALSO</h2> <a name="id2543563"></a><h2>SEE ALSO</h2>
<p> <p>
<span class="citerefentry"><span class="refentrytitle">pkcs11-list</span>(3)</span>, <span class="citerefentry"><span class="refentrytitle">pkcs11-list</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">pkcs11-destroy</span>(3)</span> <span class="citerefentry"><span class="refentrytitle">pkcs11-destroy</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-keyfromlabel</span>(3)</span>,
</p> </p>
</div> </div>
<div class="refsect1" lang="en"> <div class="refsect1" lang="en">
<a name="id2543546"></a><h2>CAVEAT</h2> <a name="id2543598"></a><h2>CAVEAT</h2>
<p>The public exponent is hard-wired to 65537.</p> <p>Some PKCS#11 providers crash with big public exponent.</p>
<p>The command should optionally set the object ID too.</p>
</div> </div>
<div class="refsect1" lang="en"> <div class="refsect1" lang="en">
<a name="id2543561"></a><h2>AUTHOR</h2> <a name="id2543609"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span> <p><span class="corpauthor">Internet Systems Consortium</span>
</p> </p>
</div> </div>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment