[pkg-opensc-commit] [opensc] 17/50: pkcs11-tool.1.xml: Add documentation for missing options in pkcs11-tool

Eric Dorland eric at moszumanska.debian.org
Sat May 28 03:35:47 UTC 2016


This is an automated email from the git hooks/post-receive script.

eric pushed a commit to branch master
in repository opensc.

commit 972a93ab471588c81378b4dc6968b89c5f8006a4
Author: Jakub Jelen <jjelen at redhat.com>
Date:   Tue Mar 22 14:27:13 2016 +0100

    pkcs11-tool.1.xml: Add documentation for missing options in  pkcs11-tool
---
 doc/tools/pkcs11-tool.1.xml | 157 +++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 156 insertions(+), 1 deletion(-)

diff --git a/doc/tools/pkcs11-tool.1.xml b/doc/tools/pkcs11-tool.1.xml
index 3efcccc..5d7f005 100644
--- a/doc/tools/pkcs11-tool.1.xml
+++ b/doc/tools/pkcs11-tool.1.xml
@@ -56,6 +56,15 @@
 
 				<varlistentry>
 					<term>
+						<option>--unlock-pin</option>
+					</term>
+					<listitem><para>Unlock User PIN (without <option>--login</option>
+					unlock in logged in session; otherwise <option>--login-type</option>
+					has to be 'context-specific').</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--hash</option>,
 						<option>-h</option>
 					</term>
@@ -75,7 +84,7 @@
 						<option>--init-pin</option>
 					</term>
 					<listitem><para>Initializes the user PIN. This option
-					differs from --change-pin in that it sets the user PIN
+					differs from <option>--change-pin</option> in that it sets the user PIN
 					for the first time. Once set, the user PIN can be changed
 					using <option>--change-pin</option>.</para></listitem>
 				</varlistentry>
@@ -107,6 +116,34 @@
 
 				<varlistentry>
 					<term>
+						<option>--key-type</option> <replacement>specification</replacement>
+					</term>
+					<listitem><para>Specify the type and length of the key to create, for example rsa:1024 or EC:prime256v1.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--usage-sign</option>
+					</term>
+					<listitem><para>Specify 'sign' key usage flag (sets SIGN in privkey, sets VERIFY in pubkey).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--usage-decrypt</option>
+					</term>
+					<listitem><para>Specify 'decrypt' key usage flag (RSA only, set DECRYPT privkey, ENCRYPT in pubkey).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--usage-derive</option>
+					</term>
+					<listitem><para>Specify 'derive' key usage flag (EC only).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--label</option> <replaceable>name</replaceable>,
 						<option>-a</option> <replaceable>name</replaceable>
 					</term>
@@ -159,6 +196,14 @@
 
 				<varlistentry>
 					<term>
+						<option>--login-type</option>
+					</term>
+					<listitem><para>Specify login type ('so', 'user', 'context-specific';
+					default:'user').</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--mechanism</option> <replaceable>mechanism</replaceable>,
 						<option>-m</option> <replaceable>mechanism</replaceable>
 					</term>
@@ -214,6 +259,20 @@
 
 				<varlistentry>
 					<term>
+						<option>--puk</option> <replaceable>puk</replaceable>
+					</term>
+					<listitem><para>Supply User PUK on the command line.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--new-pin</option> <replaceable>pin</replaceable>
+					</term>
+					<listitem><para>Supply new User PIN on the command line.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--set-id</option> <replaceable>id</replaceable>,
 						<option>-e</option> <replaceable>id</replaceable>
 					</term>
@@ -245,6 +304,13 @@
 
 				<varlistentry>
 					<term>
+						<option>--derive</option>,
+					</term>
+					<listitem><para>Derive a secret key using another key and some data.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--slot</option> <replaceable>id</replaceable>
 					</term>
 					<listitem><para>Specify the id of the slot to use.</para></listitem>
@@ -298,6 +364,38 @@
 
 				<varlistentry>
 					<term>
+						<option>--test-hotplug</option>
+					</term>
+					<listitem><para>Test hotplug capabilities (C_GetSlotList +
+					C_WaitForSlotEvent).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--private</option>
+					</term>
+					<listitem><para>Set the CKA_PRIVATE attribute (object is only
+					viewable after a login).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--test-ec</option>
+					</term>
+					<listitem><para>Test EC (best used with the <option>--login</option>
+					or <option>--pin</option> option).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--test-fork</option>
+					</term>
+					<listitem><para>Test forking and calling C_Initialize() in the
+					child.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--type</option> <replaceable>type</replaceable>,
 						<option>-y</option> <replaceable>type</replaceable>
 					</term>
@@ -319,6 +417,63 @@
 
 				<varlistentry>
 					<term>
+						<option>--read-object</option>,
+						<option>-r</option>
+					</term>
+					<listitem><para>Get object's CKA_VALUE attribute (use with
+					<option>--type</option>).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--delete-object</option>,
+						<option>-b</option>
+					</term>
+					<listitem><para>Delete an object.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--application-label</option> <replaceable>label</replaceable>
+					</term>
+					<listitem><para>Specify the application label of the data object (use with
+					<option>--type</option> data).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--application-id</option> <replaceable>id</replaceable>
+					</term>
+					<listitem><para>Specify the application ID of the data object (use with
+					<option>--type</option> data).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--issuer</option> <replaceable>data</replaceable>
+					</term>
+					<listitem><para>Specify the issuer in hexadecimal format (use with
+					<option>--type</option> cert).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--subject</option> <replaceable>data</replaceable>
+					</term>
+					<listitem><para>Specify the subject in hexadecimal format (use with
+					<option>--type</option> cert/privkey/pubkey).</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
+						<option>--signature-format</option> <replaceable>format</replaceable>
+					</term>
+					<listitem><para>Format for ECDSA signature: 'rs' (default),
+					'sequence', 'openssl'.</para></listitem>
+				</varlistentry>
+
+				<varlistentry>
+					<term>
 						<option>--write-object</option> <replaceable>id</replaceable>,
 						<option>-w</option> <replaceable>path</replaceable>
 					</term>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-opensc/opensc.git



More information about the pkg-opensc-commit mailing list