OS Manuals

/usr/bin/modutil

From libnss-tools 3.133-r0 (os), captured 2026-11-05 by running modutil --help (exit 1). permalink

ERROR: Unknown option: --help.

Netscape Cryptographic Module Utility
Usage: modutil [command] [options]

                            COMMANDS
---------------------------------------------------------------------------
-add MODULE_NAME                 Add the named module to the module database
   -libfile LIBRARY_FILE         The name of the file (.so or .dll)
                                 containing the implementation of PKCS #11
   [-ciphers CIPHER_LIST]        Enable the given ciphers on this module
   [-mechanisms MECHANISM_LIST]  Make the module a default provider of the
                                 given mechanisms
   [-string CONFIG_STRING]       Pass a configuration string to this module
-changepw TOKEN                  Change the password on the named token
   [-pwfile FILE]                The old password is in this file
   [-newpwfile FILE]             The new password is in this file
-chkfips [ true | false ]        If true, verify  FIPS mode.  If false,
                                 verify not FIPS mode
-create                          Create a new set of security databases
-default MODULE                  Make the given module a default provider
   -mechanisms MECHANISM_LIST    of the given mechanisms
   [-slot SLOT]                  limit change to only the given slot
-delete MODULE                   Remove the named module from the module
                                 database
-disable MODULE                  Disable the named module
   [-slot SLOT]                  Disable only the named slot on the module
-enable MODULE                   Enable the named module
   [-slot SLOT]                  Enable only the named slot on the module
-fips [ true | false ]           If true, enable FIPS mode.  If false,
                                 disable FIPS mode
-force                           Do not run interactively
-jar JARFILE                     Install a PKCS #11 module from the given
                                 JAR file in the PKCS #11 JAR format
   -installdir DIR               Use DIR as the root directory of the
                                 installation
   [-tempdir DIR]                Use DIR as the temporary installation
                                 directory. If not specified, the current
                                 directory is used
-list [MODULE]                   Lists information about the specified module
                                 or about all modules if none is specified
-rawadd MODULESPEC               Add module spec string to secmod DB
-rawlist [MODULE]                Display module spec(s) for one or all
                                 loadable modules
-undefault MODULE                The given module is NOT a default provider
   -mechanisms MECHANISM_LIST    of the listed mechanisms
   [-slot SLOT]                  limit change to only the given slot
---------------------------------------------------------------------------

                             OPTIONS
---------------------------------------------------------------------------
-dbdir DIR                       Directory DIR contains the security databases
-dbprefix prefix                 Prefix for the security databases
-nocertdb                        Do not load certificate or key databases. No
                                 verification will be performed on JAR files.
-secmod secmodName               Name of the security modules file
---------------------------------------------------------------------------

Mechanism lists are colon-separated.  The following mechanisms are recognized:
RSA, DSA, DH, RC2, RC4, RC5, AES, CAMELLIA, DES, MD2, MD5, SHA1, SHA256, SHA512,
SSL, TLS, RANDOM, and FRIENDLY

Cipher lists are colon-separated.  The following ciphers are recognized:


Questions or bug reports should be sent to modutil-support@netscape.com.
Options (22)
OptionDescriptionSource
-add MODULE_NAMEAdd the named module to the module databasehelp
-libfile LIBRARY_FILEThe name of the file (.so or .dll) containing the implementation of PKCS #11help
-changepw TOKENChange the password on the named token [-pwfile FILE] The old password is in this file [-newpwfile FILE] The new password is in this filehelp
-chkfipsIf true, verify FIPS mode.help
-createCreate a new set of security databaseshelp
-default MODULEMake the given module a default providerhelp
-mechanisms MECHANISM_LISTof the given mechanismshelp
-delete MODULERemove the named module from the module databasehelp
-disable MODULEDisable the named module [-slot SLOT] Disable only the named slot on the modulehelp
-enable MODULEEnable the named module [-slot SLOT] Enable only the named slot on the modulehelp
-fipsIf true, enable FIPS mode.help
-forceDo not run interactivelyhelp
-jar JARFILEInstall a PKCS #11 module from the given JAR file in the PKCS #11 JAR formathelp
-installdir DIRUse DIR as the root directory of the installationhelp
-list MODULELists information about the specified module or about all modules if none is specifiedhelp
-rawadd MODULESPECAdd module spec string to secmod DBhelp
-rawlist MODULEDisplay module spec(s) for one or all loadable moduleshelp
-undefault MODULEThe given module is NOT a default providerhelp
-dbdir DIRDirectory DIR contains the security databaseshelp
-dbprefix prefixPrefix for the security databaseshelp
-nocertdbDo not load certificate or key databases.help
-secmod secmodNameName of the security modules filehelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.