Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

CRL(1)				    OpenSSL				CRL(1)

NAME
       crl - CRL utility

SYNOPSIS
       openssl crl [-inform PEM⎪DER] [-outform PEM⎪DER] [-text] [-in filename]
       [-out filename] [-noout] [-hash] [-issuer] [-lastupdate] [-nextupdate]
       [-CAfile file] [-CApath dir]

DESCRIPTION
       The crl command processes CRL files in DER or PEM format.

COMMAND OPTIONS
       -inform DER⎪PEM
	   This specifies the input format. DER format is DER encoded CRL
	   structure. PEM (the default) is a base64 encoded version of the DER
	   form with header and footer lines.

       -outform DER⎪PEM
	   This specifies the output format, the options have the same meaning
	   as the -inform option.

       -in filename
	   This specifies the input filename to read from or standard input if
	   this option is not specified.

       -out filename
	   specifies the output filename to write to or standard output by
	   default.

       -text
	   print out the CRL in text form.

       -noout
	   don't output the encoded version of the CRL.

       -hash
	   output a hash of the issuer name. This can be use to lookup CRLs in
	   a directory by issuer name.

       -issuer
	   output the issuer name.

       -lastupdate
	   output the lastUpdate field.

       -nextupdate
	   output the nextUpdate field.

       -CAfile file
	   verify the signature on a CRL by looking up the issuing certificate
	   in file

       -CApath dir
	   verify the signature on a CRL by looking up the issuing certificate
	   in dir. This directory must be a standard certificate directory:
	   that is a hash of each subject name (using x509 -hash) should be
	   linked to each certificate.

NOTES
       The PEM CRL format uses the header and footer lines:

	-----BEGIN X509 CRL-----
	-----END X509 CRL-----

EXAMPLES
       Convert a CRL file from PEM to DER:

	openssl crl -in crl.pem -outform DER -out crl.der

       Output the text form of a DER encoded certificate:

	openssl crl -in crl.der -text -noout

BUGS
       Ideally it should be possible to create a CRL using appropriate options
       and files too.

SEE ALSO
       crl2pkcs7(1), ca(1), x509(1)

0.9.8k				  2009-05-20				CRL(1)

Vote for polarhome