doc/man1/openssl-storeutl.pod.in

   1 =pod
   2
   3 =begin comment
   4 {- join("\n", @autowarntext) -}
   5
   6 =end comment
   7
   8 =head1 NAME
   9
  10 openssl-storeutl - STORE command
  11
  12 =head1 SYNOPSIS
  13
  14 B<openssl> B<storeutl>
  15 [B<-help>]
  16 [B<-out> I<file>]
  17 [B<-noout>]
  18 [B<-passin> I<arg>]
  19 [B<-text> I<arg>]
  20 [B<-r>]
  21 [B<-certs>]
  22 [B<-keys>]
  23 [B<-crls>]
  24 [B<-subject> I<arg>]
  25 [B<-issuer> I<arg>]
  26 [B<-serial> I<arg>]
  27 [B<-alias> I<arg>]
  28 [B<-fingerprint> I<arg>]
  29 [B<-I<digest>>]
  30 {- $OpenSSL::safe::opt_engine_synopsis -}{- $OpenSSL::safe::opt_provider_synopsis -}
  31 I<uri>
  32
  33 =head1 DESCRIPTION
  34
  35 This command can be used to display the contents (after
  36 decryption as the case may be) fetched from the given URI.
  37
  38 =head1 OPTIONS
  39
  40 =over 4
  41
  42 =item B<-help>
  43
  44 Print out a usage message.
  45
  46 =item B<-out> I<filename>
  47
  48 specifies the output filename to write to or standard output by
  49 default.
  50
  51 =item B<-noout>
  52
  53 this option prevents output of the PEM data.
  54
  55 =item B<-passin> I<arg>
  56
  57 the key password source. For more information about the format of I<arg>
  58 see L<openssl-passphrase-options(1)>.
  59
  60 =item B<-text>
  61
  62 Prints out the objects in text form, similarly to the B<-text> output from
  63 L<openssl-x509(1)>, L<openssl-pkey(1)>, etc.
  64
  65 =item B<-r>
  66
  67 Fetch objects recursively when possible.
  68
  69 =item B<-certs>
  70
  71 =item B<-keys>
  72
  73 =item B<-crls>
  74
  75 Only select the certificates, keys or CRLs from the given URI.
  76 However, if this URI would return a set of names (URIs), those are always
  77 returned.
  78
  79 Note that all options must be given before the I<uri> argument.
  80
  81 =item B<-subject> I<arg>
  82
  83 Search for an object having the subject name I<arg>.
  84
  85 The arg must be formatted as C</type0=value0/type1=value1/type2=...>.
  86 Special characters may be escaped by C<\> (backslash), whitespace is retained.
  87 Empty values are permitted but are ignored for the search.  That is,
  88 a search with an empty value will have the same effect as not specifying
  89 the type at all.
  90 Giving a single C</> will lead to an empty sequence of RDNs (a NULL-DN).
  91 Multi-valued RDNs can be formed by placing a C<+> character instead of a C</>
  92 between the AttributeValueAssertions (AVAs) that specify the members of the set.
  93
  94 Example:
  95
  96 C</DC=org/DC=OpenSSL/DC=users/UID=123456+CN=John Doe>
  97
  98 =item B<-issuer> I<arg>
  99
 100 =item B<-serial> I<arg>
 101
 102 Search for an object having the given issuer name and serial number.
 103 These two options I<must> be used together.
 104 The issuer arg must be formatted as C</type0=value0/type1=value1/type2=...>,
 105 characters may be escaped by \ (backslash), no spaces are skipped.
 106 The serial arg may be specified as a decimal value or a hex value if preceded
 107 by C<0x>.
 108
 109 =item B<-alias> I<arg>
 110
 111 Search for an object having the given alias.
 112
 113 =item B<-fingerprint> I<arg>
 114
 115 Search for an object having the given fingerprint.
 116
 117 =item B<-I<digest>>
 118
 119 The digest that was used to compute the fingerprint given with B<-fingerprint>.
 120
 121 {- $OpenSSL::safe::opt_engine_item -}
 122
 123 {- $OpenSSL::safe::opt_provider_item -}
 124
 125 =back
 126
 127 =head1 SEE ALSO
 128
 129 L<openssl(1)>
 130
 131 =head1 HISTORY
 132
 133 This command was added in OpenSSL 1.1.1.
 134
 135 The B<-engine> option was deprecated in OpenSSL 3.0.
 136
 137 =head1 COPYRIGHT
 138
 139 Copyright 2016-2023 The OpenSSL Project Authors. All Rights Reserved.
 140
 141 Licensed under the Apache License 2.0 (the "License").  You may not use
 142 this file except in compliance with the License.  You can obtain a copy
 143 in the file LICENSE in the source distribution or at
 144 L<https://www.openssl.org/source/license.html>.
 145
 146 =cut