Scroll to navigation

PKI --PUB(1) strongSwan PKI --PUB(1)

NAME

pki --pub - Extract a public key from a private key or certificate

SYNOPSIS

pki --pub [--in file|--keyid hex] [--type type] [--outform encoding] [--debug level]
pki --pub --options file
pki --pub -h | --help

DESCRIPTION

This sub-command of pki(1) extracts public keys from a private keys and certificates.

OPTIONS

Print usage information with a summary of the available options.
Set debug level, default: 1.
-+, --options file
Read command line options from file.
Input file. If not given the input is read from STDIN.
Smartcard or TPM private key object handle in hex format with an optional 0x prefix.
Type of input. One of priv (private key), rsa (RSA private key), ecdsa (ECDSA private key), pub (public key), pkcs10 (PKCS#10 certificate request), or x509 (X.509 certificate), defaults to priv.
Encoding of the extracted public key. One of der (ASN.1 DER), pem (Base64 PEM), dnskey (RFC 3110 DNS key), or sshkey (RFC 4253 SSH key), defaults to der.

EXAMPLES

Extract the public key from an RSA private key:


pki --pub --in key.der > pub.der

Extract the public key from an X.509 certificate:


pki --pub --in cert.der --type x509 > pub.der

SEE ALSO

pki(1)

2013-07-31 5.5.2