1 .\" Automatically generated by Pod::Man 2.12 (Pod::Simple 3.05)
4 .\" ========================================================================
5 .de Sh \" Subsection heading
13 .de Sp \" Vertical space (when we can't use .PP)
17 .de Vb \" Begin verbatim text
22 .de Ve \" End verbatim text
26 .\" Set up some character translations and predefined strings. \*(-- will
27 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
28 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
29 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
30 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
31 .\" nothing in troff, for use with C<>.
33 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
37 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
38 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
51 .\" If the F register is turned on, we'll generate index entries on stderr for
52 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
53 .\" entries marked with X<> in POD. Of course, you'll have to process the
54 .\" output yourself in some meaningful fashion.
57 . tm Index:\\$1\t\\n%\t"\\$2"
63 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
64 .\" Fear. Run. Save yourself. No user-serviceable parts.
65 . \" fudge factors for nroff and troff
74 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
80 . \" simple accents for nroff and troff
90 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
91 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
92 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
93 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
94 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
95 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
97 . \" troff and (daisy-wheel) nroff accents
98 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
99 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
100 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
101 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
102 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
103 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
104 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
105 .ds ae a\h'-(\w'a'u*4/10)'e
106 .ds Ae A\h'-(\w'A'u*4/10)'E
107 . \" corrections for vroff
108 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
109 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
110 . \" for low resolution devices (crt and lpr)
111 .if \n(.H>23 .if \n(.V>19 \
124 .\" ========================================================================
127 .TH CRL 1 "2007-10-24" "0.9.8g" "OpenSSL"
128 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
129 .\" way too many mistakes in technical documents.
135 .IX Header "SYNOPSIS"
136 \&\fBopenssl\fR \fBcrl\fR
137 [\fB\-inform PEM|DER\fR]
138 [\fB\-outform PEM|DER\fR]
140 [\fB\-in filename\fR]
141 [\fB\-out filename\fR]
147 [\fB\-CAfile file\fR]
150 .IX Header "DESCRIPTION"
151 The \fBcrl\fR command processes \s-1CRL\s0 files in \s-1DER\s0 or \s-1PEM\s0 format.
152 .SH "COMMAND OPTIONS"
153 .IX Header "COMMAND OPTIONS"
154 .IP "\fB\-inform DER|PEM\fR" 4
155 .IX Item "-inform DER|PEM"
156 This specifies the input format. \fB\s-1DER\s0\fR format is \s-1DER\s0 encoded \s-1CRL\s0
157 structure. \fB\s-1PEM\s0\fR (the default) is a base64 encoded version of
158 the \s-1DER\s0 form with header and footer lines.
159 .IP "\fB\-outform DER|PEM\fR" 4
160 .IX Item "-outform DER|PEM"
161 This specifies the output format, the options have the same meaning as the
162 \&\fB\-inform\fR option.
163 .IP "\fB\-in filename\fR" 4
164 .IX Item "-in filename"
165 This specifies the input filename to read from or standard input if this
166 option is not specified.
167 .IP "\fB\-out filename\fR" 4
168 .IX Item "-out filename"
169 specifies the output filename to write to or standard output by
173 print out the \s-1CRL\s0 in text form.
174 .IP "\fB\-noout\fR" 4
176 don't output the encoded version of the \s-1CRL\s0.
179 output a hash of the issuer name. This can be use to lookup CRLs in
180 a directory by issuer name.
181 .IP "\fB\-issuer\fR" 4
183 output the issuer name.
184 .IP "\fB\-lastupdate\fR" 4
185 .IX Item "-lastupdate"
186 output the lastUpdate field.
187 .IP "\fB\-nextupdate\fR" 4
188 .IX Item "-nextupdate"
189 output the nextUpdate field.
190 .IP "\fB\-CAfile file\fR" 4
191 .IX Item "-CAfile file"
192 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
194 .IP "\fB\-CApath dir\fR" 4
195 .IX Item "-CApath dir"
196 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
197 \&\fBdir\fR. This directory must be a standard certificate directory: that
198 is a hash of each subject name (using \fBx509 \-hash\fR) should be linked
202 The \s-1PEM\s0 \s-1CRL\s0 format uses the header and footer lines:
205 \& \-\-\-\-\-BEGIN X509 CRL\-\-\-\-\-
206 \& \-\-\-\-\-END X509 CRL\-\-\-\-\-
209 .IX Header "EXAMPLES"
210 Convert a \s-1CRL\s0 file from \s-1PEM\s0 to \s-1DER:\s0
213 \& openssl crl \-in crl.pem \-outform DER \-out crl.der
216 Output the text form of a \s-1DER\s0 encoded certificate:
219 \& openssl crl \-in crl.der \-text \-noout
223 Ideally it should be possible to create a \s-1CRL\s0 using appropriate options
226 .IX Header "SEE ALSO"
227 \&\fIcrl2pkcs7\fR\|(1), \fIca\fR\|(1), \fIx509\fR\|(1)