certtool Reference

Type certtool at the command prompt to get a list of commands that you can use with the tool.

To access more information about a specific command, the list command for example, type:

certtool –h list

Syntax

certtool[OPTIONS]

The following is a summary of commands available to use with certool.

Full command Shortened command Description

-liststores

-ls

Lists the available certstore implementations.

-list

-l

Lists the content of the certstore.

-import

-i

Imports certificates in the certstore.

-remove

-r

Removes a certificate from the certstore.

-addapps

-a

Adds applications to those a certificate is trusted for.

-setapps

-s

Sets the applications for which a certificate is trusted, for example, software install, TLS and so on.

-removeapps

n/a

Removes applications from those a certificate is trusted for.

Note: Long commands, for example liststores, list, addapps, setapps and removeapps are not case-sensitive but short commands, for example -ls, -l, -a,-s and -rk are case sensitive.

If the commands are given incorrectly or in the wrong sequence, for example certtool -store -l or certtool -i -l, the tool displays the default general help command.

In interactive mode, any command called with the -p option, displays screen full of details and waits for key input. In non-interactive mode, the option is omitted.

certtool example

To read commands from an “inputfile” and give the output in “outputfile”, use the following command:

Certool <inputfile> <outputfile>

The file name should be mentioned with the path. If the tool cannot open the “inputfile” or cannot create the output file, it will turn to interactive mode and display the general help command. The input file can contain multiple commands but each command should be separated by a new line character.