5.6.8 Import certificates

To import certificates into the internal key database, the command

  IMPORT [--re-import]

is used. The data is expected on the file descriptor set with the INPUT command. Certain checks are performed on the certificate. Note that the code will also handle PKCS#12 files and import private keys; a helper program is used for that.

With the option --re-import the input data is expected to a be a linefeed separated list of fingerprints. The command will re-import the corresponding certificates; that is they are made permanent by removing their ephemeral flag.