Setup guide
The setpin Command
36 Netscape Certificate Management System Command-Line Tools Guide • May 2002
• [gen=RNG-alpha | RNG-alphanum | RNG-printableascii]
Use this argument to specify the type of characters for PINs. The characters in
the password can be constructed out of alphabetic characters (
RNG-alpha),
alphanumeric characters (
RNG-alphanum), or any printable ASCII characters
(
printableascii).
• [case=upperonly]
Use this argumentwiththe gen parameter. If youdo,the case for all alphabetic
characters is fixed to uppercase only; otherwise, the case is mixed. Restricting
alphabetic characters to uppercase reduces the overall combinations for the
password space significantly.
• [hash=sha1 | md5 | none]
Use this argument to specify the message digest algorithm the tool should use
to hash the PINs before storing them in the authentication directory. If you
wanttostorePINsasSHA-1orMD5hashedvaluesinthedirectory,besureto
specify an output file for storin g PINs in pla in text. You will need the PINs i n
plain text for delivering them to end entities.
sha1 produces a 160-bit message digest. This option is used by default.
md5 produces a 128-bit message digest.
none does not hash the PINs .
• [output=<file_name>]
Use this argument to specify the absolute path to the fileto which the tool
should write the PINs as it generates them; this is the file to which the tool will
capture the output.
If you don’t specify a filename, the tool will write the output to the standard
output. In any case, all the error messages will be directed to the standard
error.
• [clobber]
Use this argument to specify whether the tool should overwrite preexisting
PINs, if any, associated with a DN (user). If specified, the tool overwrites the
existing PINs with the one it generates. Otherwise, it leaves the existing PINs
as they are.
• [write]
Use this argument to specify whether the tool should write PINs to the
directory. If specified, the tool writes PINs (as it generates) to the directory.
Otherwise, the tool does not m ake any changes to the directory.