NSS tools : cmsutil¶
Name
Synopsis
cmsutil [options] arguments
Description
Options and Arguments
Options
-D
Decode a message.
-C
Encrypt a message.
-E
Envelope a message.
-O
Create a certificates-only message.
-S
Sign a message.
Arguments
Option arguments modify an action and are lowercase.
-c content
Use this detached content (decode only).
-d dbdir
Specify the key/certificate database directory (default is “.”)
-e envfile
-G
Include a signing time attribute (sign only).
-h num
Generate email headers with info about CMS message (decode only).
-i infile
Use infile as a source of data (default is stdin).
-N nickname
Specify nickname of certificate to sign with (sign only).
-n
Suppress output of contents (decode only).
-o outfile
Use outfile as a destination of data (default is stdout).
-P
Include an S/MIME capabilities attribute.
-p password
Use password as key database password.
-r recipient1,recipient2, …
-T
Suppress content in CMS message (sign only).
-u certusage
Set type of cert usage (default is certUsageEmailSigner).
-Y ekprefnick
Specify an encryption key preference by nickname.
Usage
Encrypt Example
cmsutil -C [-i infile] [-o outfile] [-d dbdir] [-p password] -r “recipient1,recipient2, …” -e envfile
cmsutil -D [-i infile] [-o outfile] [-d dbdir] [-p password] [-c content] [-n] [-h num]
cmsutil -E [-i infile] [-o outfile] [-d dbdir] [-p password] -r “recipient1,recipient2, …”
cmsutil -O [-i infile] [-o outfile] [-d dbdir] [-p password] -r “cert1,cert2, …”
cmsutil -S [-i infile] [-o outfile] [-d dbdir] [-p password] -N nickname[-TGP] [-Y ekprefnick]
certutil(1)
See Also
Additional Resources
Mailing lists: pki-devel@redhat.com and pki-users@redhat.com
IRC: Freenode at #dogtag-pki
Authors
Copyright
2010, Red Hat, Inc. Licensed under the GNU Public License version 2.
References