TRUST(1) TRUST(1) (NAME) trust - (SYNOPSIS) trust list trust extract --filter= --format= /path/to/destination trust anchor /path/to/certificate.crt trust dump trust check-format /path/to/file.p11-kit... (DESCRIPTION) trust . . : -v, --verbose (debug). -q, --quiet . (LIST) . $ trust list . PKCS#11 URI . . --filter= . : ca-anchors (Certificate anchors) trust-policy () blocklist (Distrusted certificates) certificates pkcs11:object=xx PKCS#11 URI () . . . --purpose= . : server-auth client-auth email () code-signing 1.2.3.4.5... OID (ANCHOR) (trust anchors). $ trust anchor /path/to/certificate.crt $ trust anchor --remove /path/to/certificate.crt $ trust anchor --remove "pkcs11:id=%AA%BB%CC%DD%EE;type=cert" . (Root CA) . --store --remove . --store . . . PKCS#11 URI . . (root) . : --remove . PKCS#11 URI . --store . . (EXTRACT) . $ trust extract --format=x509-directory --filter=ca-anchors /path/to/directory . --filter --format . . --comment PEM . --filter= . : ca-anchors () trust-policy blocklist certificates pkcs11:object=xx PKCS#11 URI . . . --format= . : x509-file DER X.509 x509-directory X.509 pem-bundle PEM pem-directory PEM pem-directory-hash PEM openssl-bundle PEM OpenSSL openssl-directory PEM OpenSSL java-cacerts 'cacerts' (Java keystore) --overwrite . --purpose= . : server-auth client-auth email () code-signing 1.2.3.4.5... OID (EXTRACT COMPAT) (compatibility trust bundles). $ trust extract-compat OpenSSL Java GnuTLS . . . . (DUMP) PKCS#11 . $ trust dump PKCS#11 . PKCS#11 URI p11-kit. . . --filter= . : all . pkcs11:object=xx PKCS#11 URI (CHECK FORMAT) p11-kit. $ trust check-format /path/to/file.p11-kit... p11-kit. . . p11-kit. . . p11-kit. (stderr) . (stdout) . (BUGS) : https://github.com/p11-glue/p11-kit/issues. (SEE ALSO) p11-kit(8) : https://p11-glue.github.io/p11-glue/doc/storing-trust-policy p11-kit : https://p11-glue.github.io/p11-glue/p11-kit/manual. p11-kit TRUST(1)