Switch from OpenSSL 0.9.7d to 0.9.7e.
[dragonfly.git] / secure / usr.bin / openssl / man / crl2pkcs7.1
CommitLineData
e3cdf75b
JR
1.rn '' }`
2''' $RCSfile$$Revision$$Date$
3'''
4''' $Log$
5'''
6.de Sh
984263bc
MD
7.br
8.if t .Sp
9.ne 5
10.PP
11\fB\\$1\fR
12.PP
13..
e3cdf75b 14.de Sp
984263bc
MD
15.if t .sp .5v
16.if n .sp
17..
e3cdf75b 18.de Ip
984263bc
MD
19.br
20.ie \\n(.$>=3 .ne \\$3
21.el .ne 3
22.IP "\\$1" \\$2
23..
e3cdf75b 24.de Vb
984263bc
MD
25.ft CW
26.nf
27.ne \\$1
28..
e3cdf75b 29.de Ve
984263bc
MD
30.ft R
31
32.fi
33..
e3cdf75b
JR
34'''
35'''
36''' Set up \*(-- to give an unbreakable dash;
37''' string Tr holds user defined translation string.
38''' Bell System Logo is used as a dummy character.
39'''
984263bc 40.tr \(*W-|\(bv\*(Tr
984263bc 41.ie n \{\
e3cdf75b
JR
42.ds -- \(*W-
43.ds PI pi
44.if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
45.if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
46.ds L" ""
47.ds R" ""
48''' \*(M", \*(S", \*(N" and \*(T" are the equivalent of
49''' \*(L" and \*(R", except that they are used on ".xx" lines,
50''' such as .IP and .SH, which do another additional levels of
51''' double-quote interpretation
52.ds M" """
53.ds S" """
54.ds N" """""
55.ds T" """""
56.ds L' '
57.ds R' '
58.ds M' '
59.ds S' '
60.ds N' '
61.ds T' '
984263bc
MD
62'br\}
63.el\{\
e3cdf75b
JR
64.ds -- \(em\|
65.tr \*(Tr
66.ds L" ``
67.ds R" ''
68.ds M" ``
69.ds S" ''
70.ds N" ``
71.ds T" ''
72.ds L' `
73.ds R' '
74.ds M' `
75.ds S' '
76.ds N' `
77.ds T' '
78.ds PI \(*p
984263bc 79'br\}
e3cdf75b
JR
80.\" If the F register is turned on, we'll generate
81.\" index entries out stderr for the following things:
82.\" TH Title
83.\" SH Header
84.\" Sh Subsection
85.\" Ip Item
86.\" X<> Xref (embedded
87.\" Of course, you have to process the output yourself
88.\" in some meaninful fashion.
89.if \nF \{
90.de IX
91.tm Index:\\$1\t\\n%\t"\\$2"
984263bc 92..
e3cdf75b
JR
93.nr % 0
94.rr F
984263bc 95.\}
e3cdf75b
JR
96.TH CRL2PKCS7 1 "0.9.7d" "2/Sep/2004" "OpenSSL"
97.UC
98.if n .hy 0
984263bc 99.if n .na
e3cdf75b
JR
100.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
101.de CQ \" put $1 in typewriter font
102.ft CW
103'if n "\c
104'if t \\&\\$1\c
105'if n \\&\\$1\c
106'if n \&"
107\\&\\$2 \\$3 \\$4 \\$5 \\$6 \\$7
108'.ft R
109..
110.\" @(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2
111. \" AM - accent mark definitions
984263bc 112.bd B 3
e3cdf75b 113. \" fudge factors for nroff and troff
984263bc 114.if n \{\
e3cdf75b
JR
115. ds #H 0
116. ds #V .8m
117. ds #F .3m
118. ds #[ \f1
119. ds #] \fP
984263bc
MD
120.\}
121.if t \{\
e3cdf75b
JR
122. ds #H ((1u-(\\\\n(.fu%2u))*.13m)
123. ds #V .6m
124. ds #F 0
125. ds #[ \&
126. ds #] \&
984263bc 127.\}
e3cdf75b 128. \" simple accents for nroff and troff
984263bc 129.if n \{\
e3cdf75b
JR
130. ds ' \&
131. ds ` \&
132. ds ^ \&
133. ds , \&
134. ds ~ ~
135. ds ? ?
136. ds ! !
137. ds /
138. ds q
984263bc
MD
139.\}
140.if t \{\
e3cdf75b
JR
141. ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
142. ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
143. ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
144. ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
145. ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
146. ds ? \s-2c\h'-\w'c'u*7/10'\u\h'\*(#H'\zi\d\s+2\h'\w'c'u*8/10'
147. ds ! \s-2\(or\s+2\h'-\w'\(or'u'\v'-.8m'.\v'.8m'
148. ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
149. ds q o\h'-\w'o'u*8/10'\s-4\v'.4m'\z\(*i\v'-.4m'\s+4\h'\w'o'u*8/10'
984263bc 150.\}
e3cdf75b 151. \" troff and (daisy-wheel) nroff accents
984263bc
MD
152.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
153.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
e3cdf75b
JR
154.ds v \\k:\h'-(\\n(.wu*9/10-\*(#H)'\v'-\*(#V'\*(#[\s-4v\s0\v'\*(#V'\h'|\\n:u'\*(#]
155.ds _ \\k:\h'-(\\n(.wu*9/10-\*(#H+(\*(#F*2/3))'\v'-.4m'\z\(hy\v'.4m'\h'|\\n:u'
156.ds . \\k:\h'-(\\n(.wu*8/10)'\v'\*(#V*4/10'\z.\v'-\*(#V*4/10'\h'|\\n:u'
157.ds 3 \*(#[\v'.2m'\s-2\&3\s0\v'-.2m'\*(#]
984263bc
MD
158.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
159.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
160.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
161.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
162.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
163.ds ae a\h'-(\w'a'u*4/10)'e
164.ds Ae A\h'-(\w'A'u*4/10)'E
e3cdf75b
JR
165.ds oe o\h'-(\w'o'u*4/10)'e
166.ds Oe O\h'-(\w'O'u*4/10)'E
167. \" corrections for vroff
984263bc
MD
168.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
169.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
e3cdf75b 170. \" for low resolution devices (crt and lpr)
984263bc
MD
171.if \n(.H>23 .if \n(.V>19 \
172\{\
e3cdf75b
JR
173. ds : e
174. ds 8 ss
175. ds v \h'-1'\o'\(aa\(ga'
176. ds _ \h'-1'^
177. ds . \h'-1'.
178. ds 3 3
179. ds o a
180. ds d- d\h'-1'\(ga
181. ds D- D\h'-1'\(hy
182. ds th \o'bp'
183. ds Th \o'LP'
184. ds ae ae
185. ds Ae AE
186. ds oe oe
187. ds Oe OE
984263bc
MD
188.\}
189.rm #[ #] #H #V #F C
984263bc 190.SH "NAME"
e3cdf75b 191crl2pkcs7 \- Create a PKCS#7 structure from a CRL and certificates.
984263bc 192.SH "SYNOPSIS"
e3cdf75b 193\fBopenssl\fR \fBcrl2pkcs7\fR
984263bc
MD
194[\fB\-inform PEM|DER\fR]
195[\fB\-outform PEM|DER\fR]
196[\fB\-in filename\fR]
197[\fB\-out filename\fR]
198[\fB\-certfile filename\fR]
199[\fB\-nocrl\fR]
200.SH "DESCRIPTION"
e3cdf75b 201The \fBcrl2pkcs7\fR command takes an optional CRL and one or more
984263bc
MD
202certificates and converts them into a PKCS#7 degenerate \*(L"certificates
203only\*(R" structure.
204.SH "COMMAND OPTIONS"
e3cdf75b 205.Ip "\fB\-inform \s-1DER\s0|\s-1PEM\s0\fR" 4
984263bc
MD
206This specifies the \s-1CRL\s0 input format. \fB\s-1DER\s0\fR format is \s-1DER\s0 encoded \s-1CRL\s0
207structure.\fB\s-1PEM\s0\fR (the default) is a base64 encoded version of
208the \s-1DER\s0 form with header and footer lines.
e3cdf75b
JR
209.Ip "\fB\-outform \s-1DER\s0|\s-1PEM\s0\fR" 4
210This specifies the \s-1PKCS\s0#7 structure output format. \fB\s-1DER\s0\fR format is \s-1DER\s0
211encoded \s-1PKCS\s0#7 structure.\fB\s-1PEM\s0\fR (the default) is a base64 encoded version of
984263bc
MD
212the \s-1DER\s0 form with header and footer lines.
213.Ip "\fB\-in filename\fR" 4
984263bc
MD
214This specifies the input filename to read a \s-1CRL\s0 from or standard input if this
215option is not specified.
216.Ip "\fB\-out filename\fR" 4
e3cdf75b 217specifies the output filename to write the \s-1PKCS\s0#7 structure to or standard
984263bc
MD
218output by default.
219.Ip "\fB\-certfile filename\fR" 4
984263bc 220specifies a filename containing one or more certificates in \fB\s-1PEM\s0\fR format.
e3cdf75b 221All certificates in the file will be added to the \s-1PKCS\s0#7 structure. This
984263bc
MD
222option can be used more than once to read certificates form multiple
223files.
224.Ip "\fB\-nocrl\fR" 4
984263bc
MD
225normally a \s-1CRL\s0 is included in the output file. With this option no \s-1CRL\s0 is
226included in the output file and a \s-1CRL\s0 is not read from the input file.
227.SH "EXAMPLES"
e3cdf75b 228Create a PKCS#7 structure from a certificate and CRL:
984263bc
MD
229.PP
230.Vb 1
231\& openssl crl2pkcs7 -in crl.pem -certfile cert.pem -out p7.pem
232.Ve
e3cdf75b 233Creates a PKCS#7 structure in DER format with no CRL from several
984263bc
MD
234different certificates:
235.PP
236.Vb 2
237\& openssl crl2pkcs7 -nocrl -certfile newcert.pem
238\& -certfile demoCA/cacert.pem -outform DER -out p7.der
239.Ve
240.SH "NOTES"
984263bc 241The output file is a PKCS#7 signed data structure containing no signers and
e3cdf75b 242just certificates and an optional CRL.
984263bc
MD
243.PP
244This utility can be used to send certificates and CAs to Netscape as part of
e3cdf75b
JR
245the certificate enrollment process. This involves sending the DER encoded output
246as MIME type application/x-x509-user-cert.
984263bc 247.PP
e3cdf75b
JR
248The \fBPEM\fR encoded form with the header and footer lines removed can be used to
249install user certificates and CAs in MSIE using the Xenroll control.
984263bc 250.SH "SEE ALSO"
984263bc 251pkcs7(1)
e3cdf75b
JR
252
253.rn }` ''
254.IX Title "CRL2PKCS7 1"
255.IX Name "crl2pkcs7 - Create a PKCS#7 structure from a CRL and certificates."
256
257.IX Header "NAME"
258
259.IX Header "SYNOPSIS"
260
261.IX Header "DESCRIPTION"
262
263.IX Header "COMMAND OPTIONS"
264
265.IX Item "\fB\-inform \s-1DER\s0|\s-1PEM\s0\fR"
266
267.IX Item "\fB\-outform \s-1DER\s0|\s-1PEM\s0\fR"
268
269.IX Item "\fB\-in filename\fR"
270
271.IX Item "\fB\-out filename\fR"
272
273.IX Item "\fB\-certfile filename\fR"
274
275.IX Item "\fB\-nocrl\fR"
276
277.IX Header "EXAMPLES"
278
279.IX Header "NOTES"
280
281.IX Header "SEE ALSO"
282