1 .\" Automatically generated by Pod::Man 2.16 (Pod::Simple 3.05)
4 .\" ========================================================================
5 .de Sh \" Subsection heading
13 .de Sp \" Vertical space (when we can't use .PP)
17 .de Vb \" Begin verbatim text
22 .de Ve \" End verbatim text
26 .\" Set up some character translations and predefined strings. \*(-- will
27 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
28 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
29 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
30 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
31 .\" nothing in troff, for use with C<>.
33 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
37 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
38 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
51 .\" Escape single quotes in literal strings from groff's Unicode transform.
55 .\" If the F register is turned on, we'll generate index entries on stderr for
56 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
57 .\" entries marked with X<> in POD. Of course, you'll have to process the
58 .\" output yourself in some meaningful fashion.
61 . tm Index:\\$1\t\\n%\t"\\$2"
71 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
72 .\" Fear. Run. Save yourself. No user-serviceable parts.
73 . \" fudge factors for nroff and troff
82 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
88 . \" simple accents for nroff and troff
98 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
99 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
100 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
101 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
102 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
103 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
105 . \" troff and (daisy-wheel) nroff accents
106 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
107 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
108 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
109 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
110 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
111 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
112 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
113 .ds ae a\h'-(\w'a'u*4/10)'e
114 .ds Ae A\h'-(\w'A'u*4/10)'E
115 . \" corrections for vroff
116 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
117 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
118 . \" for low resolution devices (crt and lpr)
119 .if \n(.H>23 .if \n(.V>19 \
132 .\" ========================================================================
135 .TH CRL 1 "2009-04-11" "0.9.8k" "OpenSSL"
136 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
137 .\" way too many mistakes in technical documents.
143 .IX Header "SYNOPSIS"
144 \&\fBopenssl\fR \fBcrl\fR
145 [\fB\-inform PEM|DER\fR]
146 [\fB\-outform PEM|DER\fR]
148 [\fB\-in filename\fR]
149 [\fB\-out filename\fR]
155 [\fB\-CAfile file\fR]
158 .IX Header "DESCRIPTION"
159 The \fBcrl\fR command processes \s-1CRL\s0 files in \s-1DER\s0 or \s-1PEM\s0 format.
160 .SH "COMMAND OPTIONS"
161 .IX Header "COMMAND OPTIONS"
162 .IP "\fB\-inform DER|PEM\fR" 4
163 .IX Item "-inform DER|PEM"
164 This specifies the input format. \fB\s-1DER\s0\fR format is \s-1DER\s0 encoded \s-1CRL\s0
165 structure. \fB\s-1PEM\s0\fR (the default) is a base64 encoded version of
166 the \s-1DER\s0 form with header and footer lines.
167 .IP "\fB\-outform DER|PEM\fR" 4
168 .IX Item "-outform DER|PEM"
169 This specifies the output format, the options have the same meaning as the
170 \&\fB\-inform\fR option.
171 .IP "\fB\-in filename\fR" 4
172 .IX Item "-in filename"
173 This specifies the input filename to read from or standard input if this
174 option is not specified.
175 .IP "\fB\-out filename\fR" 4
176 .IX Item "-out filename"
177 specifies the output filename to write to or standard output by
181 print out the \s-1CRL\s0 in text form.
182 .IP "\fB\-noout\fR" 4
184 don't output the encoded version of the \s-1CRL\s0.
187 output a hash of the issuer name. This can be use to lookup CRLs in
188 a directory by issuer name.
189 .IP "\fB\-issuer\fR" 4
191 output the issuer name.
192 .IP "\fB\-lastupdate\fR" 4
193 .IX Item "-lastupdate"
194 output the lastUpdate field.
195 .IP "\fB\-nextupdate\fR" 4
196 .IX Item "-nextupdate"
197 output the nextUpdate field.
198 .IP "\fB\-CAfile file\fR" 4
199 .IX Item "-CAfile file"
200 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
202 .IP "\fB\-CApath dir\fR" 4
203 .IX Item "-CApath dir"
204 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
205 \&\fBdir\fR. This directory must be a standard certificate directory: that
206 is a hash of each subject name (using \fBx509 \-hash\fR) should be linked
210 The \s-1PEM\s0 \s-1CRL\s0 format uses the header and footer lines:
213 \& \-\-\-\-\-BEGIN X509 CRL\-\-\-\-\-
214 \& \-\-\-\-\-END X509 CRL\-\-\-\-\-
217 .IX Header "EXAMPLES"
218 Convert a \s-1CRL\s0 file from \s-1PEM\s0 to \s-1DER:\s0
221 \& openssl crl \-in crl.pem \-outform DER \-out crl.der
224 Output the text form of a \s-1DER\s0 encoded certificate:
227 \& openssl crl \-in crl.der \-text \-noout
231 Ideally it should be possible to create a \s-1CRL\s0 using appropriate options
234 .IX Header "SEE ALSO"
235 \&\fIcrl2pkcs7\fR\|(1), \fIca\fR\|(1), \fIx509\fR\|(1)