Skip to content

Listing Archived Keys

Jump to bottom
Endi S. Dewata edited this page Mar 19, 2024 · 8 revisions

To list archived keys:

$ pki -n caadmin kra-key-find
----------------
1 key(s) matched
----------------
  Key ID: 0x1
  Client Key ID: testkey
  Status: active
  Algorithm: RSA
  Size: 1024
  Owner: kraadmin
----------------------------
Number of entries returned 1
----------------------------

To list archived keys of specific owners:

$ pki -n caadmin kra-key-find --owner UID=testuser
----------------
1 key(s) matched
----------------
  Key ID: 0x39f9a475fc569ed63a0cca110a04a1bf
  Algorithm: 1.2.840.113549.1.1.1
  Size: 2048
  Owner: UID=testuser
----------------------------
Number of entries returned 1
----------------------------

The --owner filter parameter fetches keys corresponding to a specific owner.

Keys archived by CA might look like the following:

  Key ID: 0x39f9a475fc569ed63a0cca110a04a1bf
  Algorithm: 1.2.840.113549.1.1.1
  Size: 2048
  Owner: UID=testuser

Keys archived by TPS might look like the following:

  Key ID: 0x00eaa1433c9cb26df5e2c263d5429a3764
  Algorithm: RSA
  Size: 1024
  Owner: DC64C599EF770D9D3D61:testuser1

  Key ID: 0x6a6b0ec3b7878685329c204c1c6ac178
  Algorithm: RSA
  Size: 1024
  Owner: 485486E509C820F0D01B:testuser2

Keys archived by IPA might look like the following:

  Key ID: 0x01
  Client Key ID: ipa:/users/admin/test_vault
  Status: inactive
  Owner: ipakra

  Key ID: 0x02
  Client Key ID: ipa:/services/HTTP/[email protected]/test_vault
  Status: inactive
  Owner: ipakra

  Key ID: 0x03
  Client Key ID: ipa:/shared/test_vault
  Status: inactive
  Owner: ipakra
Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally