# srptool

## NAME



           **srptool** - GnuTLS SRP tool
    


## SYNOPSIS



           **srptool**[**-flags**] [**-flag**[_value_]] [**--option-name**[[=| ]_value_]]
    
           All arguments must be options.
    


## DESCRIPTION



           Simple program that emulates the programs in the Stanford SRP
           (Secure Remote Password) libraries using GnuTLS.  It is intended
           for use in  places where you don't expect SRP authentication to be
           the used for system users.
    
           In  brief,  to use SRP you need to create two files. These are the
           password file that holds the users and the verifiers associated
           with  them  and  the configuration file to hold the group
           parameters (called tpasswd.conf).
    


## OPTIONS



           **-d** _num_ , **--debug** =_num_ Enable debugging.  This option takes an
           integer number as its argument.  The value of _num_ is constrained
           to being:
               in the range 0 through 9999
    
           Specifies the debug level.
    
           **-i** _num_ , **--index** =_num_ This option takes an integer number as its
           argument.  The default _number_ for this option is:
                3
    
           **-u** _str_ , **--username** =_str_
    
           **-p** _str_ , **--passwd** =_str_
    
           **-s** _num_ , **--salt** =_num_ This option takes an integer number as its
           argument.
    
           **--verify** Verifies the password provided against the password file.
    
           **-v** _str_ , **--passwd-conf** =_str_ Specify a filename or a PKCS #11 URL to
           read the CAs from.
    
           **--create-conf** =_str_ Generate a password configuration file.
    
           This generates a password configuration file (tpasswd.conf)
           containing the required for TLS parameters.
    
           **-v** _arg_ , **--version** =_arg_ Output version of program and exit.  The
           default mode is `v', a simple version.  The `c' mode will print
           copyright information and `n' will print the full copyright
           notice.
    
           **-h** , **--help** Display usage information and exit.
    
           **-!** , **--more-help** Pass the extended usage information through a
           pager.
    


## EXAMPLES



                  To create _tpasswd.conf_ which holds the g and n values for
                  SRP protocol (generator and a large prime), run:
                      $ srptool --create-conf /etc/tpasswd.conf
    
                  This command will create _/etc/tpasswd_ and will add user
                  'test' (you will also be prompted for a password).
                  Verifiers are stored by default in the way libsrp expects.
                      $ srptool --passwd /etc/tpasswd --passwd-conf /etc/tpasswd.conf -u test
    
                  This command will check against a password. If the password
                  matches the one in _/etc/tpasswd_ you will get an ok.
                      $ srptool --passwd /etc/tpasswd --passwd\-conf /etc/tpasswd.conf --verify -u test
    


## EXIT STATUS



           One of the following exit values will be returned:
    
           0  (EXIT_SUCCESS) Successful program execution.
    
           1  (EXIT_FAILURE) The operation failed or the command syntax was
           not valid.
    


## BUGS



           Please send bug reports to: bugs@gnutls.org
    


* * *