jeu. févr. 22 14:30:14 root@vps-de:/etc/swanctl # pki --help
strongSwan 6.0.0beta5 PKI tool
loaded plugins: random drbg x509 pubkey pkcs1 pkcs8 pem openssl oqs
usage:
  pki --acert   (-z)  issue an attribute certificate
  pki --dn      (-d)  extract the subject DN of an X.509 certificate
  pki --est     (-E)  Enroll an X.509 certificate with an EST server
  pki --estca   (-e)  get CA certificate[s] from an EST server
  pki --gen     (-g)  generate a new private key
  pki --issue   (-i)  issue a certificate using a CA certificate and key
  pki --keyid   (-k)  calculate key identifiers of a key/certificate
  pki --ocsp    (-o)  OCSP responder
  pki --pkcs12  (-u)  PKCS#12 functions
  pki --pkcs7   (-7)  PKCS#7 wrap/unwrap functions
  pki --print   (-a)  print a credential in a human readable form
  pki --pub     (-p)  extract the public key from a private key/certificate
  pki --req     (-r)  create a PKCS#10 certificate request
  pki --scep    (-S)  Enroll an X.509 certificate with a SCEP server
  pki --scepca  (-C)  get CA [and RA] certificate[s] from a SCEP server
  pki --self    (-s)  create a self signed certificate
  pki --signcrl (-c)  issue a CRL using a CA certificate and key
  pki --verify  (-v)  verify a certificate using the CA certificate
  pki --help    (-h)  show usage information