PKI --PKCS7(1) strongSwan PKI --PKCS7(1)

# [NAME](#NAME)

pki --pkcs7 - Provides PKCS#7 wrap/unwrap functions

# [SYNOPSIS](#SYNOPSIS)

`pki --pkcs7` **--sign**|**--verify**|**--encrypt**|**--decrypt**|**--show** \[**--in** *file*] \[**--cert** *file*] \[**--key** *file*] \[**--digest** *digest*] \[**--rsa-padding** *padding*] \[**--debug** *level*]

`pki --pkcs7` **--options file**

`pki --pkcs7` **-h** | **--help**

# [DESCRIPTION](#DESCRIPTION)

This sub-command of [**pki**(1)](/man/os/strongswan/pki.1) provides functions to wrap/unwrap PKCS#7 containers.

# [OPTIONS](#OPTIONS)

[**-h, --help**](#h,)

Print usage information with a summary of the available options.

[**-v, --debug level**](#v,)

Set debug level, default: 1.

**-+, --options file**

Read command line options from *file*.

[**-s, --sign**](#s,)

Create PKCS#7 signed-data.

[**-u, --verify**](#u,)

Verify PKCS#7 signed-data.

[**-e, --encrypt**](#e,)

Create PKCS#7 enveloped-data.

[**-e, --decrypt**](#e,~2)

Decrypt PKCS#7 enveloped-data.

[**-p, --show**](#p,)

Show information about PKCS#7 container, list certificates.

[**-i, --in file**](#i,)

PKCS#7 input file. If not given the input is read from *STDIN*.

[**-k, --key file**](#k,)

Private key used for **--sign** and **--decrypt.**

[**-c, --cert file**](#c,)

Certificate for **--sign**, **--verify** and **--encrypt.** Can be used multiple times.

[**-g, --digest digest**](#g,)

Digest to use for signature creation. One of *md5*, *sha1*, *sha224*, *sha256*, *sha384*, or *sha512*. The default is determined based on the type and size of the signature key.

[**-R, --rsa-padding padding**](#R,)

Padding to use for RSA signatures. Either *pkcs1* or *pss*, defaults to *pkcs1*.

# [SEE ALSO](#SEE_ALSO)

[**pki**(1)](/man/os/strongswan/pki.1)

2023-03-30 6.0.6

---

Document: pki---pkcs7(1) from strongswan 6.0.6-r0 (Chainguard OS)
Source: https://github.com/strongswan/strongswan