SYSTEMD-KEYUTIL(1) systemd-keyutil SYSTEMD-KEYUTIL(1) systemd-keyutil - X.509 systemd-keyutil [...] {} systemd-keyutil X.509. validate --private-key= --certificate= . . $SYSTEMD_ASK_PASSWORD_KEYRING_TIMEOUT_SEC $SYSTEMD_ASK_PASSWORD_KEYRING_TYPE . 257. extract-public PEM --certificate= --private-key=. 257. extract-certificate X.509 PEM --certificate=. OpenSSL ( ) PEM . 260. pkcs7 PKCS#1 (RSA) --signature= PKCS#7 --certificate= --output= PKCS#7 (p7s). --content= p7s "". --hash-algorithm= "SHA256" . 258. : --private-key= --private-key-source=[:] --certificate= --certificate-source=[:] . --certificate= X.509 PEM URI OpenSSL --certificate-source. --certificate-source "file" "provider" "provider:pkcs11". --private-key= URI OpenSSL --private-key-source= "type:name" "engine:pkcs11". 257. --signature= PKCS#1 pkcs7. 258. --content= PKCS#1 pkcs7 PKCS#7 ( ""). 258. --hash-algorithm= PKCS#1 pkcs7. openssl "openssl list -digest-algorithms" . "SHA256". 258. --output= PKCS#7 pkcs7. 258. -h --help . --version . systemd-sbsign(1) systemd-measure(1) 3 . . : . systemd 260.2 SYSTEMD-KEYUTIL(1)