install_skip_keys(1M)

NAME
install_skip_keys - install private key and certificate

SYNOPSIS
/usr/sbin/install_skip_keys [-icg] filename

DESCRIPTION
install_skip_keys installs keys received from a key server (default) or from the SUN ICG CA (if -icg is specified). If a key server key package is to be installed, filename specifies the name of that package. The key file is a PGP or uuencoded file containing: a Diffie-Hellman private key, a Diffie-Hellman signed public key, the common Diffie-Hellman parameters used by the certificate issuer, the certificate issuer's signed public key, and a MD5 checksum of the other four files. filename is an encoded tar file usually received from a keyserver or other certificate issuer.

When installing a SUN ICG CA certificate filename is the directory name containing the files. This is usually a floppy, so the path will often be similar to /floppy/floppy0.

OPTIONS

USAGE

You must be root to run this command.

install_skip_keys verifies the md5 checksums in the checksum file match the md5 checksums of the individual files. If they match, the files are moved into place.

The key manager must be restarted in order for it to recognize the new keys.

EXAMPLE

The following example installs the private key and certificate from the key file mykey.pgp.

    # install_skip_keys mykey.pgp

FILES

/etc/skip/certdb /etc/skip/localid/... /etc/skip/CAs/...

NOTES
Currently the name of the Certificate is hard coded into the code. We expect certificates to come from the SKIP experimental Zero Assurance Certificate Issuer or the SUN ICG CA. Even if they do not the certificate will have to be called ZeroAssurance_Cert. This release does not support multiple Certificate Issuers.