/testing/guestbin/swan-prep --nokeys
Initializing NSS database
west #
 rm -f /tmp/newhostkey.txt
west #
 ckaid=$(ipsec newhostkey --keytype eddsa 2>&1 | grep "showhostkey" | sed "s/^.*ckaid //")
west #
 # sanitizing brought to you by id-sanitize.sed
west #
 ipsec showhostkey --list
< 1> EDDSA keyid: <<KEYID#1>> ckaid: <<CKAID#1>>
west #
 ipsec showhostkey --dump
< 1> EDDSA keyid: <<KEYID#1>> ckaid: <<CKAID#1>>
west #
 ipsec showhostkey --left --ckaid "${ckaid}"
	# left keyid: <<KEYID#1>>
	lefteddsakey=0s<<RAW-PUBKEY#1>>
west #
 ipsec showhostkey --left --pubkey --ckaid "${ckaid}"
	# left keyid: <<KEYID#1>>
	leftpubkey=<<PEM-PUBKEY#1>>
west #
 ipsec showhostkey --ipseckey --ckaid "${ckaid}"
west.    IN    IPSECKEY  10 0 4 . <<RAW-PUBKEY#1>>
west #
 ipsec showhostkey --ipseckey --pubkey --ckaid "${ckaid}"
west.    IN    IPSECKEY  10 0 5 . <<PEM-PUBKEY#1>>
west #
 # see description.txt for why they are different
west #
 ipsec showhostkey --pem --ckaid "${ckaid}"
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
west #
 ipsec showhostkey --pem --ckaid "${ckaid}" | openssl pkey -inform PEM -pubin
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
west #
