p11tool — Manipulate PKCS #11 tokens.
Export/import data from PKCS #11 tokens. To use PKCS #11 tokens with gnutls the configuration file /etc/gnutls/pkcs11.conf has to exist and contain a number of lines of the form "load=/usr/lib/opensc-pkcs11.so".
−d,
−−debug LEVELSpecify the debug level. Default is 1.
−h,
−−helpShows this help text
−−loginForce login to the token for the intended operation.
−−provider
MODULEIn addition to /etc/gnutls/pkcs11.conf, load the specified module.
−−outfile FILEPrint output to FILE.
−−inder,
−−inrawInput is DER formatted.
−−list−tokensPrints all available tokens.
−−initialize
URLInitializes (formats) the specified by the URL token. Note that several tokens do not support this fascility.
−−list−all−certsPrints all available certificates.
−−list−certsPrints all certificates that have a corresponding private key stored in the token.
−−list−trustedPrints all certificates that have been marked as trusted.
−−export URLExports the object (e.g. certificate) specified by the URL.
−−delete URLDeletes the object specified by the URL. Note that several tokens do not support deletion.
−−detailed−urlWhen printing URLs print them in a detailed (to the PKCS #11 module used) form.
−−no−detailed−urlWhen printing URLs, do not print details on the module used.
−−write URLFlag to set when writing an object. Requires one of −−load−privkey, −−load−pubkey, −−load−certificate or −−secret−key options.
−−load−privkeyLoad a private key for the write operations.
−−load−pubkeyLoad an X.509 subjectPublicKey for the write operation.
−−load−certificateLoad an X.509 certificate for the write operation.
−−secret−keySpecify a hex encoded secret key for the write operation.
−−trustedThe object stored will be marked as trusted.
−−labelThe label of the object stored.