skipdb(1M)

NAME
skipdb - Manage the SKIP Certificate Database

SYNOPSIS
/usr/sbin/skipdb -[a|r|l|i|e|C] [action specific arguments] ...

DESCRIPTION
skipdb allows a user to manually administer the SKIP database of certificates. SKIP uses a database to store long term certificates so that they may be accessed by the key manager.

SUBCOMMANDS
The Following subcommands follow the skipdb command on the command line.

-a [-q] -t certtype -n nsid -c filename
Adds certificates to the SKIP certificate database. The certtype argument sets the type of the certificate to be added. Certificate types are X509 and udh (unsigned Diffie-Hellman). The nsid argument is a decimal number which corresponds to the namespace of the certificate. Common NSID values are 1(ipv4) and 8 (udh). Filename is the certificate file you wish to add to the database. The -q option prevents status messages from being printed.

-e -n nsid -k keyid
Extracts a certificate to the standard output. The first certificate which matches nsid and keyid will be written. The extracted form is suitable for addition to a database using the skipdb -a command. This subcommand will write only one certificate to the standard output, even if there are multiple certificates which match the nsid, keyid pair.

-i [-qo]
Prior to being used, the certificate database must be initialized. The -i subcommand performs this operation. If the database exists, the -o option will delete the contents of the database. The -q option prevents status messages from being printed.

-l [-VvL] [-n nsid] [-k keyid]
List certificates in the certificate database. -V switches the output to a format more easily parsed by machines. -L lists expiration times along with the Name Space and Master KeyId. -v switches the output to a verbose more where the entire certificate is printed. -n and -k limit the listing to certificates whose name matches the specified keyid and nsid.

-r -n nsid -k keyid
Removes certificates in the certificate database. Certificates with the specified namespace identifier (NSID) and keyid will be deleted.

-C
Checks existence of the certificate databse. Returns a non-zero exit status if the database file does not exist or cannot be read.

USAGE

You must be root to run this command.

X509 Certificates without proper signatures will not be added to the database. Therefore, the CAs certificate must be added to the CA Certificate database using the skipca command prior to adding certificates signed by that CA to the database.

Unsigned public keys will be added with the appropriate hash of their contents as the name.

RETURN VALUES
skipdb will always return 0 on Success and non-zero on error. An appropriate error message will be written to standard error.

FILES

/etc/skip/certdb

SEE ALSO
skiplocal(1m) skipca(1m) skipd(1m)