1 .\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.32
4 .\" ========================================================================
5 .de Sh \" Subsection heading
13 .de Sp \" Vertical space (when we can't use .PP)
17 .de Vb \" Begin verbatim text
22 .de Ve \" End verbatim text
26 .\" Set up some character translations and predefined strings. \*(-- will
27 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
28 .\" double quote, and \*(R" will give a right double quote. | will give a
29 .\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used to
30 .\" do unbreakable dashes and therefore won't be available. \*(C` and \*(C'
31 .\" expand to `' in nroff, nothing in troff, for use with C<>.
33 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
37 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
38 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
51 .\" If the F register is turned on, we'll generate index entries on stderr for
52 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
53 .\" entries marked with X<> in POD. Of course, you'll have to process the
54 .\" output yourself in some meaningful fashion.
57 . tm Index:\\$1\t\\n%\t"\\$2"
63 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
64 .\" way too many mistakes in technical documents.
68 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
69 .\" Fear. Run. Save yourself. No user-serviceable parts.
70 . \" fudge factors for nroff and troff
79 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
85 . \" simple accents for nroff and troff
95 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
96 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
97 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
98 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
99 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
100 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
102 . \" troff and (daisy-wheel) nroff accents
103 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
104 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
105 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
106 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
107 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
108 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
109 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
110 .ds ae a\h'-(\w'a'u*4/10)'e
111 .ds Ae A\h'-(\w'A'u*4/10)'E
112 . \" corrections for vroff
113 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
114 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
115 . \" for low resolution devices (crt and lpr)
116 .if \n(.H>23 .if \n(.V>19 \
129 .\" ========================================================================
132 .TH CRL 1 "2008-09-27" "0.9.8i" "OpenSSL"
136 .IX Header "SYNOPSIS"
137 \&\fBopenssl\fR \fBcrl\fR
138 [\fB\-inform PEM|DER\fR]
139 [\fB\-outform PEM|DER\fR]
141 [\fB\-in filename\fR]
142 [\fB\-out filename\fR]
148 [\fB\-CAfile file\fR]
151 .IX Header "DESCRIPTION"
152 The \fBcrl\fR command processes \s-1CRL\s0 files in \s-1DER\s0 or \s-1PEM\s0 format.
153 .SH "COMMAND OPTIONS"
154 .IX Header "COMMAND OPTIONS"
155 .IP "\fB\-inform DER|PEM\fR" 4
156 .IX Item "-inform DER|PEM"
157 This specifies the input format. \fB\s-1DER\s0\fR format is \s-1DER\s0 encoded \s-1CRL\s0
158 structure. \fB\s-1PEM\s0\fR (the default) is a base64 encoded version of
159 the \s-1DER\s0 form with header and footer lines.
160 .IP "\fB\-outform DER|PEM\fR" 4
161 .IX Item "-outform DER|PEM"
162 This specifies the output format, the options have the same meaning as the
163 \&\fB\-inform\fR option.
164 .IP "\fB\-in filename\fR" 4
165 .IX Item "-in filename"
166 This specifies the input filename to read from or standard input if this
167 option is not specified.
168 .IP "\fB\-out filename\fR" 4
169 .IX Item "-out filename"
170 specifies the output filename to write to or standard output by
174 print out the \s-1CRL\s0 in text form.
175 .IP "\fB\-noout\fR" 4
177 don't output the encoded version of the \s-1CRL\s0.
180 output a hash of the issuer name. This can be use to lookup CRLs in
181 a directory by issuer name.
182 .IP "\fB\-issuer\fR" 4
184 output the issuer name.
185 .IP "\fB\-lastupdate\fR" 4
186 .IX Item "-lastupdate"
187 output the lastUpdate field.
188 .IP "\fB\-nextupdate\fR" 4
189 .IX Item "-nextupdate"
190 output the nextUpdate field.
191 .IP "\fB\-CAfile file\fR" 4
192 .IX Item "-CAfile file"
193 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
195 .IP "\fB\-CApath dir\fR" 4
196 .IX Item "-CApath dir"
197 verify the signature on a \s-1CRL\s0 by looking up the issuing certificate in
198 \&\fBdir\fR. This directory must be a standard certificate directory: that
199 is a hash of each subject name (using \fBx509 \-hash\fR) should be linked
203 The \s-1PEM\s0 \s-1CRL\s0 format uses the header and footer lines:
206 \& -----BEGIN X509 CRL-----
207 \& -----END X509 CRL-----
210 .IX Header "EXAMPLES"
211 Convert a \s-1CRL\s0 file from \s-1PEM\s0 to \s-1DER:\s0
214 \& openssl crl -in crl.pem -outform DER -out crl.der
217 Output the text form of a \s-1DER\s0 encoded certificate:
220 \& openssl crl -in crl.der -text -noout
224 Ideally it should be possible to create a \s-1CRL\s0 using appropriate options
227 .IX Header "SEE ALSO"
228 \&\fIcrl2pkcs7\fR\|(1), \fIca\fR\|(1), \fIx509\fR\|(1)