The ssh-cmpclient command-line tool is a certificate
enrollment client that uses the CMP
protocol. It can generate an RSA or DSA public-key pair and get
certificates for their public components. CMP is specified by the IETF
PKIX Working Group for certificate life-cycle management, and is
supported by some CA platforms, such as Entrust PKI, RSA Keon, and
SSH Tectia Certifier.
