The extract-cert tool is used to fetch the X.509 certificate associated with a key from a PKCS#11 token (such as a HSM or YubiKey). This version is derived from certs/extract-cert in the Linux kernel as a stand-alone tool to make it available when signing other software components besides the kernel.
On Tue, Jan 31, 2023 at 3:03 AM Jan Luebbe <jlu@...> wrote:
The extract-cert tool is used to fetch the X.509 certificate associated with a key from a PKCS#11 token (such as a HSM or YubiKey). This version is derived from certs/extract-cert in the Linux kernel as a stand-alone tool to make it available when signing other software components besides the kernel.