mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00

Files

Marc Hartmayer 175b336d32 rust/utils: Replace get_verified_hkds with get_verified_hkds_new

Now as no users of get_verified_hkds exists, replace it with
get_verified_hkds_new.

Signed-off-by: Marc Hartmayer <marc@linux.ibm.com>
Reviewed-by: Steffen Eiden <seiden@linux.ibm.com>
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>

2026-07-28 11:00:01 +02:00

man

Add tool to verify host-key documents

2025-12-10 14:43:15 +01:00

src

rust/utils: Replace get_verified_hkds with get_verified_hkds_new

2026-07-28 11:00:01 +02:00

build.rs

pvverify: Use hybrid keys

2026-07-28 11:00:01 +02:00

Cargo.toml

rust: Upgrade MSRV and dependencies

2026-06-22 16:43:02 +02:00

README.md

Add tool to verify host-key documents

2025-12-10 14:43:15 +01:00

README.md

pvverify

Synopsis

pvverify [OPTIONS] --host-key-document <FILE> <--no-verify|--cert <FILE>>

Description

Tool to verify host-keys Tool to verify host-keys. Use this tool to verify the chain of trust for IBM Secure

Options

-k, --host-key-document <FILE>

Use FILE as a host-key document. Can be specified multiple times and must be specified at least once.

--no-verify

Disable the host-key document verification. Does not require the host-key documents to be valid. Do not use for a production request unless you verified the host-key document beforehand.

-C, --cert <FILE>

Use FILE as a certificate to verify the host-key or keys. The certificates are used to establish a chain of trust for the verification of the host-key documents. Specify this option twice to specify the IBM Z signing key and the intermediate CA certificate (signed by the root CA).

--crl <FILE>

Use FILE as a certificate revocation list (CRL). The list is used to check whether a certificate of the chain of trust is revoked. Specify this option multiple times to use multiple CRLs.

--offline

Make no attempt to download CRLs.

--root-ca <ROOT_CA>

Use FILE as the root-CA certificate for the verification. If omitted, the system wide-root CAs installed on the system are used. Use this only if you trust the specified certificate.

--version

Print version information and exit.

-h, --help

Print help (see a summary with '-h').