Files
yubikey/pkcs15-tools.md
2024-08-24 01:58:25 +08:00

889 B

$ pkcs15-tool --list-certificates 
Using reader with a card: Yubico YubiKey OTP+FIDO+CCID
X.509 Certificate [Certificate for Card Authentication]
	Object Flags   : [0x00]
	Authority      : no
	Path           : 
	ID             : 04
	Encoded serial : 02 09 0088891A87487694BA
pkcs15-tool --list-public-keys
$ pkcs15-tool --read-ssh-key 01
Using reader with a card: Yubico YubiKey OTP+FIDO+CCID
ecdsa-sha2-nistp384 AAAAE2Vj.... PIV AUTH pubkey
$ pkcs15-tool --read-certificate 01
Using reader with a card: Yubico YubiKey OTP+FIDO+CCID
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----

$ pkcs15-tool --read-public-key 02
Using reader with a card: Yubico YubiKey OTP+FIDO+CCID
-----BEGIN PUBLIC KEY-----
....
-----END PUBLIC KEY-----

Reference

  1. https://ubuntu.com/server/docs/smart-card-authentication