skipdb(9 May 1996)

NAME
skipdb - Manage the SKIP Certificate Database

SYNOPSYS
skipdb [add | rm | list | init | extract ] ...

DESCRIPTION
skipdb allows a user to manually adminster the SKIP database of certificates. SKIP uses a database to store long term certificates so that they may be accessed by the key manager.

SUBCOMMANDS
The Following subcommands follow the skipdb command on the command line.

add -t certtype -n nsid filename
The add subcommand is used to add certificates to the The certtype argument sets the type of the certificate to be added. Certificate types are X509 and udh (unsigned Diffie-Hellman). The nsid argument is a decimal number which correponds to the namespace of the certificate. Common NSID values are 1(ipv4) and 8 (udh). Filename is the certificate file you wish to add to the database.

extract [-h handle] -n nsid keyid
Extracts a certificate to the standard output. The first certificate which matches nsid and keyid will be written. The extracted form is suitable for addition to a database using the skipdb add command. This subcommand will write only one certificate to the standard output, even if there are multiple certificates which match the nsid, keyid pair. To specify a particular certificate to extract in case of name collisions in the database, the -h option should be used to specify a handle. This handle may be obtained through the skipdb list command.

init
Prior to being used, the certificate database must be initialized. The init subcommand performs this operation. If the database exists, init will delete the contents of the database.

list [-Vev] [-n nsid keyid]
List certificates in the Certificate database. -V switches the output to a format more easily parsed by machines and includes a field called handle which may be used to address individual certificates. -e lists expiration times along with the Name Space and Master KeyId. -v switches the output to a verbose more where the entire certificate is printed. -n and keyid limit the listing to certificates whose name matches the specified keyid and nsid. The -h option may be specified to limit the display to a specific certificate by handle (as produced by -V).

rm [-h handle] -n nsid keyid
Deletes certificates in the certificate database. Certificates with the specified namespace identifier (NSID) and keyid will be deleted. The -h option may be used to limit deletions to the certificate which matches the specified handle (obtained through skipdb list -V. Note "del" is an alias for "rm".

USAGE

You must be root to run this command.

X509 Certificates without proper signatures will not be added to the database. Therefore, the CAs certificate must be added to the CA Certificate database using the skipca command prior to adding certificates signed by that CA to the database.

Unsigned public keys will be added with the appropriate hash of their contents as the name.

RETURN VALUES
skipdb will always return 0 on Success and non-zero on error. An appropriate error message will be written to standard error.

FILES

/usr/local/etc/skip/certdb

SEE ALSO
skiplocal(1m) skipca(1m) skipd(1m)