Unable to update PKI - p11-kit does not support 'extract' command
Ken Brown
kbrown@cornell.edu
Wed Jun 1 12:32:23 GMT 2022
On 6/1/2022 4:54 AM, Andrey Repin wrote:
> Greetings, All!
>> My root CA key expired recently and I'm battling to update my infrastructure.
> The most unexpected issue so far is a change in Cygwin's p11-kit, that made
> update-ca-trust script unusable.
>> Running `p11-kit extract …` immediately fails with code 2 and its manual does
> not mention `extract` command anywhere.
$ man p11-kit
NAME
p11-kit - Tool for operating on configured PKCS#11 modules
SYNOPSIS
p11-kit list-modules
p11-kit extract ...
[...]
EXTRACT
Extract certificates from configured PKCS#11 modules.
This operation has been moved to a separate command trust extract. See
trust(1) for more information
Ken
More information about the Cygwin
mailing list