"Fossies" - the Fresh Open Source Software Archive

Member "bind-9.17.5/bin/pkcs11/pkcs11-destroy.rst" (4 Sep 2020, 2148 Bytes) of package /linux/misc/dns/bind9/9.17.5/bind-9.17.5.tar.xz:


As a special service "Fossies" has tried to format the requested source page into HTML format (assuming markdown format). Alternatively you can here view or download the uninterpreted source code file. A member file download can also be achieved by clicking within a package contents listing on the according byte size field. See also the last Fossies "Diffs" side-by-side code changes report for "pkcs11-destroy.rst": 9.17.2_vs_9.17.3.

pkcs11-destroy - destroy PKCS#11 objects

Synopsis

pkcs11-destroy [-m module] [-s slot] [-i ID] [-l label] [-p PIN] [-w seconds]

Description

pkcs11-destroy destroys keys stored in a PKCS#11 device, identified by their ID or label.

Matching keys are displayed before being destroyed. By default, there is a five-second delay to allow the user to interrupt the process before the destruction takes place.

Options

-m module

This option specifies the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device.

-s slot

This option opens the session with the given PKCS#11 slot. The default is slot 0.

-i ID

This option destroys keys with the given object ID.

-l label

This option destroys keys with the given label.

-p PIN

This option specifies the PIN for the device. If no PIN is provided on the command line, pkcs11-destroy prompts for it.

-w seconds

This option specifies how long, in seconds, to pause before carrying out key destruction. The default is 5 seconds. If set to 0, destruction is immediate.

See Also

pkcs11-keygen(8), pkcs11-list(8), pkcs11-tokens(8)