NAME

telescope-identity — manage telescope identities

SYNOPSIS

DESCRIPTION

telescope-identity is an utility to manage telescope(1) identities. Identities are TLS client certificates used for Gemini.

The commands for telescope-identity are as follows:

generate [-t type] name

Generate a new keypair under the given name. If type is “RSA”, an RSA key with 4096 bit will be created. By default it's an EC key with secp384r1.

remove name

Remove the name identity.

import -C cert [-K key] name

Imports a certificate as name. -C is the path to the certificate itself. If the key is on a separate file, it needs to be passed with -K.

export -C cert name

Exports the certificate for the identity name. The certificate and the key will be saved at cert. At the moment, it's not possible to export the certificate and the private key in different files.

list

Print one per line the available identities.

mappings [name]

Show on which servers and paths the identities are used. The output consist of the identity name, a tab character, and the the hostname, optional port number and path under which that identity will be loaded by telescope(1).

If name is given, limit the output only to the instances of that identity.

use name host[:port][/path]

Save the a new mapping for the given identity name.

forget name host[:port][/path]

Remove the mapping for the given identity name.

SEE ALSO

telescope(1)

AUTHORS

The telescope-identity utility was written by Omar Polo <op@omarpolo.com>.