1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
#compdef gnutls-cli gnutls-cli-debug certtool srptool
local _gnutls_supported _gnutls_supported_certtypes
local _gnutls_supported_protocols _gnutls_supported_macs
local _gnutls_supported_kx _gnutls_supported_comp
local _gnutls_cli_common_args
_gnutls_cli_common_args=(
'(-d --debug)'{-d,--debug}':debug level'
'(-p --port)'{-p,--port}':port'
'(-h --help)'{-h,--help}'[help]' \
)
case "$service" in
(gnutls-cli)
_gnutls_supported="$(gnutls-cli --list)"
_gnutls_supported_certtypes=(${(s:, :)${${(M)${(f)_gnutls_supported}:#Certificate types:*}#Certificate types: }})
_gnutls_supported_protocols=(${(s:, :)${${(M)${(f)_gnutls_supported}:#Protocols:*}#Protocols: }})
_gnutls_supported_ciphers=(${(s:, :)${${(M)${(f)_gnutls_supported}:#Ciphers:*}#Ciphers: }})
_gnutls_supported_macs=(${(s:, :)${${(M)${(f)_gnutls_supported}:#MACs:*}#MACs: }})
_gnutls_supported_kx=(${(s:, :)${${(M)${(f)_gnutls_supported}:#Key exchange algorithms:*}#Key exchange algorithms: }})
_gnutls_supported_comp=(${(s:, :)${${(M)${(f)_gnutls_supported}:#Compression methods:*}#Compression methods: }})
_arguments \
"$_gnutls_cli_common_args[@]" \
'(-r --resume)'{-r,--resume}'[resume session]' \
'(-s --starttls)'{-s,--starttls}'[start TLS on EOF or SIGALRM]' \
'--crlf[send CR LF instead of LF]' \
'--x509fmtder[use DER format for certificates to read from]' \
'(-f --fingerprint)'{-f,--fingerprint}'[send the openpgp fingerprint instead of the key]' \
'--disable-extensions[disable all the TLS extensions]' \
'--xml[print the certificate information in XML format]' \
'--print-cert[print the certificate in PEM format]' \
'--recordsize:maximum record size to advertise:' \
'(-V --verbose)'{-V,--verbose}'[more verbose output]' \
'--ciphers:ciphers to enable:('"$_gnutls_supported_ciphers"')' \
'--protocols:protocols to enable:('"$_gnutls_supported_protocols"')' \
'--comp:compression methods to enable:('"$_gnutls_supported_comp"')' \
'--macs:MACs to enable:('"$_gnutls_supported_macs"')' \
'--kx:key exchange methods to enable:('"$_gnutls_supported_kx"')' \
'--ctypes:certificate types to enable:('"$_gnutls_supported_certtypes"')' \
'--x509cafile:certificate file to use:_files' \
'--x509crlfile:CRL file to use:_files' \
'--pgpkeyfile:PGP key file to use:_files' \
'--pgpkeyring:PGP key ring file to use:_files' \
'--pgptrustdb:PGP trustdb file to use:_files' \
'--pgpcertfile:PGP public key (certificate) file to use:_files' \
'--x509keyfile:X.509 key file to use:_files' \
'--x509certfile:X.509 certificate file to use:_files' \
'--srpusername:SRP username to use' \
'--srppasswd:SRP password to use' \
'--insecure[do not require server cert validation]' \
'(-l --list)'{-l,--list}'[print list of the supported algorithms/modes]' \
'(-v --version)'{-v,--version}'[print version number]' \
'--copyright[print license]' \
':hostname:_hosts'
;;
(gnutls-cli-debug)
_arguments \
"$_gnutls_cli_common_args[@]" \
'(-v --verbose)'{-v,--verbose}'[more verbose output]' \
':hostname:_hosts'
;;
(certtool)
_arguments \
'(-s --generate-self-signed)'{-s,--generate-self-signed}'[generate a self-signed certificate]' \
'(-c --generate-certificate)'{-c,--generate-certificate}'[generate a signed certificate]' \
'--generate-crl[generate a CRL]' \
'(-u --update-certificate)'{-u,--update-certificate}'[update a signed certificate]' \
'(-p --generate-privkey)'{-p,--generate-privkey}'[generate a private key]' \
'(-q --generate-request)'{-q,--generate-request}'[generate a PKCS #10 certificate request]' \
'(-e --verify-chain)'{-e,--verify-chain}'[verify a PEM encoded certificate chain]' \
'--verify-crl[verify a CRL]' \
'--generate-dh-params[generate PKCS #3 encoded Diffie Hellman parameters]' \
'--get-dh-params[get the included PKCS #3 encoded Diffie Hellman parameters]' \
'--load-privkey:private key file:_files' \
'--load-request:certificate request file:_files' \
'--load-certificate:certificate file:_files' \
'--load-ca-privkey:certificate authority private key file:_files' \
'--load-ca-certificate:certificate authority certificate file:_files' \
'--password:password' \
'(-i --certificate-info)'{-i,--certificate-info}'[print information on a certificate]' \
'(-l --crl-info)'{-l,--crl-info}'[print information on a CRL]' \
'--p12-info[print information on a PKCS #12 structure]' \
'--p7-info[print information on a PKCS #7 structure]' \
'--smime-to-p7[convert S/MIME to PKCS #7 structure]' \
'(-k --key-info)'{-k,--key-info}'[print information on a private key]' \
'--fix-key[regenerate the parameters in a private key]' \
'--to-p12[generate a PKCS #12 structure]' \
'(-8 --pkcs8)'{-8,--pkcs8}'[use PKCS #8 format for private keys]' \
'--dsa[use DSA keys]' \
'--hash:hash algorithm for signing:(MD5 SHA1 RMD160)' \
'--export-ciphers[use weak encryption algorithms]' \
'--inder[use DER format for input certificates and private keys]' \
'--xml[use XML format for output certificates]' \
'--outder[use DER format for output certificates and private keys]' \
'--bits:number of bits for key generation' \
'--outfile:output file:_files ' \
'--infile:input file:_files ' \
'--template:template file to use for non-interactive operation:_files' \
'(-d --debug)'{-d,--debug}':debug level' \
'(-h --help)'{-h,--help}'[show help]' \
'(-v --version)'{-v,--version}'[show version]' \
'--copyright[shows license]'
;;
(srptool)
_arguments \
'(-u --username)'{-u,--username}':username:_users' \
'(-p --passwd)'{-p,--passwd}':password file:_files' \
'(-i --index)'{-i,--index}':index of params in tpasswd.conf' \
'(-s --salt)'{-s,--salt}':salt size for crypt algorithm' \
'--verify[just verify password]' \
'(-c --passwd-conf)'{-c,--passwd-conf}':password conf file:_files' \
'--create-conf:generate a tpasswd.conf file:_files' \
'(-v --version)'{-v,--version}'[show version]' \
'(-h --help)'{-h,--help}'[show help]'
;;
esac
|
