{
    "content": [
        {
            "type": "text",
            "text": "# dirmngr-client (man)\n\n## NAME\n\ndirmngr-client - Tool to access the Dirmngr services\n\n## SYNOPSIS\n\ndirmngr-client [options] [certfile|pattern]\n\n## DESCRIPTION\n\nThe  dirmngr-client is a simple tool to contact a running dirmngr and test whether a certifi‐\ncate has been revoked --- either by being listed in the corresponding CRL or by  running  the\nOCSP protocol.  If no dirmngr is running, a new instances will be started but this is in gen‐\neral not a good idea due to the huge performance overhead.\n\n## Sections\n\n- **NAME**\n- **SYNOPSIS**\n- **DESCRIPTION**\n- **RETURN VALUE** (1 subsections)\n- **OPTIONS** (15 subsections)\n- **SEE ALSO**\n\nUse structuredContent.sections for detailed options, examples, and full documentation.\n"
        }
    ],
    "structuredContent": {
        "command": "dirmngr-client",
        "section": "",
        "mode": "man",
        "summary": "dirmngr-client - Tool to access the Dirmngr services",
        "synopsis": "dirmngr-client [options] [certfile|pattern]",
        "tldr_summary": null,
        "tldr_examples": [],
        "tldr_source": null,
        "flags": [
            {
                "flag": "",
                "long": "--version",
                "arg": null,
                "description": "Print the program version and licensing information. Note that you cannot abbreviate this command."
            },
            {
                "flag": "-h",
                "long": "--help",
                "arg": null,
                "description": "Print a usage message summarizing the most useful command-line options. Note that you cannot abbreviate this command."
            },
            {
                "flag": "-q",
                "long": "--quiet",
                "arg": null,
                "description": "Make the output extra brief by suppressing any informational messages."
            },
            {
                "flag": "-v",
                "long": null,
                "arg": null,
                "description": ""
            },
            {
                "flag": "",
                "long": "--verbose",
                "arg": null,
                "description": "Outputs additional information while running. You can increase the verbosity by giv‐ ing several verbose commands to dirmngr, such as ‘-vv’. --pem Assume that the given certificate is in PEM (armored) format. --ocsp Do the check using the OCSP protocol and ignore any CRLs."
            },
            {
                "flag": "",
                "long": "--force-default-responder",
                "arg": null,
                "description": "When checking using the OCSP protocol, force the use of the default OCSP responder. That is not to use the Reponder as given by the certificate. --ping Check whether the dirmngr daemon is up and running."
            },
            {
                "flag": "",
                "long": "--cache-cert",
                "arg": null,
                "description": "Put the given certificate into the cache of a running dirmngr. This is mainly useful for debugging."
            },
            {
                "flag": "",
                "long": "--validate",
                "arg": null,
                "description": "Validate the given certificate using dirmngr's internal validation code. This is mainly useful for debugging."
            },
            {
                "flag": "",
                "long": "--load-crl",
                "arg": null,
                "description": "This command expects a list of filenames with DER encoded CRL files. With the option --url URLs are expected in place of filenames and they are loaded directly from the given location. All CRLs will be validated and then loaded into dirmngr's cache."
            },
            {
                "flag": "",
                "long": "--lookup",
                "arg": null,
                "description": "Take the remaining arguments and run a lookup command on each of them. The results are Base-64 encoded outputs (without header lines). This may be used to retrieve cer‐ tificates from a server. However the output format is not very well suited if more than one certificate is returned."
            },
            {
                "flag": "",
                "long": "--url",
                "arg": null,
                "description": ""
            },
            {
                "flag": "-u",
                "long": null,
                "arg": null,
                "description": ""
            },
            {
                "flag": "",
                "long": "--local",
                "arg": null,
                "description": ""
            },
            {
                "flag": "-l",
                "long": null,
                "arg": null,
                "description": ""
            },
            {
                "flag": "",
                "long": "--squid-mode",
                "arg": null,
                "description": "Run dirmngr-client in a mode suitable as a helper program for Squid's exter‐‐ nalacltype option."
            }
        ],
        "examples": [],
        "see_also": [
            {
                "name": "dirmngr",
                "section": "8",
                "url": "https://www.chedong.com/phpMan.php/man/dirmngr/8/json"
            },
            {
                "name": "gpgsm",
                "section": "1",
                "url": "https://www.chedong.com/phpMan.php/man/gpgsm/1/json"
            },
            {
                "name": "DIRMNGR-CLIENT",
                "section": "1",
                "url": "https://www.chedong.com/phpMan.php/man/DIRMNGR-CLIENT/1/json"
            }
        ],
        "section_outline": [
            {
                "name": "NAME",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "SYNOPSIS",
                "lines": 3,
                "subsections": []
            },
            {
                "name": "DESCRIPTION",
                "lines": 18,
                "subsections": []
            },
            {
                "name": "RETURN VALUE",
                "lines": 10,
                "subsections": [
                    {
                        "name": "2 (and other values)",
                        "lines": 5
                    }
                ]
            },
            {
                "name": "OPTIONS",
                "lines": 4,
                "subsections": [
                    {
                        "name": "--version",
                        "lines": 4,
                        "long": "--version"
                    },
                    {
                        "name": "--help, -h",
                        "lines": 4,
                        "flag": "-h",
                        "long": "--help"
                    },
                    {
                        "name": "--quiet, -q",
                        "lines": 3,
                        "flag": "-q",
                        "long": "--quiet"
                    },
                    {
                        "name": "-v",
                        "lines": 1,
                        "flag": "-v"
                    },
                    {
                        "name": "--verbose",
                        "lines": 10,
                        "long": "--verbose"
                    },
                    {
                        "name": "--force-default-responder",
                        "lines": 7,
                        "long": "--force-default-responder"
                    },
                    {
                        "name": "--cache-cert",
                        "lines": 4,
                        "long": "--cache-cert"
                    },
                    {
                        "name": "--validate",
                        "lines": 4,
                        "long": "--validate"
                    },
                    {
                        "name": "--load-crl",
                        "lines": 5,
                        "long": "--load-crl"
                    },
                    {
                        "name": "--lookup",
                        "lines": 6,
                        "long": "--lookup"
                    },
                    {
                        "name": "--url",
                        "lines": 1,
                        "long": "--url"
                    },
                    {
                        "name": "-u",
                        "lines": 1,
                        "flag": "-u"
                    },
                    {
                        "name": "--local",
                        "lines": 1,
                        "long": "--local"
                    },
                    {
                        "name": "-l",
                        "lines": 1,
                        "flag": "-l"
                    },
                    {
                        "name": "--squid-mode",
                        "lines": 5,
                        "long": "--squid-mode"
                    }
                ]
            },
            {
                "name": "SEE ALSO",
                "lines": 15,
                "subsections": []
            }
        ],
        "sections": {
            "NAME": {
                "content": "dirmngr-client - Tool to access the Dirmngr services\n",
                "subsections": []
            },
            "SYNOPSIS": {
                "content": "dirmngr-client [options] [certfile|pattern]\n\n",
                "subsections": []
            },
            "DESCRIPTION": {
                "content": "The  dirmngr-client is a simple tool to contact a running dirmngr and test whether a certifi‐\ncate has been revoked --- either by being listed in the corresponding CRL or by  running  the\nOCSP protocol.  If no dirmngr is running, a new instances will be started but this is in gen‐\neral not a good idea due to the huge performance overhead.\n\n\nThe usual way to run this tool is either:\n\ndirmngr-client acert\n\n\nor\n\ndirmngr-client <acert\n\nWhere acert is one DER encoded (binary) X.509 certificates to be tested.\n\n",
                "subsections": []
            },
            "RETURN VALUE": {
                "content": "dirmngr-client returns these values:\n\n\n0      The certificate under question is valid; i.e. there is a valid CRL available and it is\nnot listed there or the OCSP request returned that that certificate is valid.\n\n\n1      The certificate has been revoked\n\n",
                "subsections": [
                    {
                        "name": "2 (and other values)",
                        "content": "There  was  a  problem checking the revocation state of the certificate.  A message to\nstderr has given more detailed information.  Most likely this is due to a  missing  or\nexpired CRL or due to a network problem.\n\n"
                    }
                ]
            },
            "OPTIONS": {
                "content": "dirmngr-client may be called with the following options:\n\n\n",
                "subsections": [
                    {
                        "name": "--version",
                        "content": "Print  the program version and licensing information.  Note that you cannot abbreviate\nthis command.\n\n",
                        "long": "--version"
                    },
                    {
                        "name": "--help, -h",
                        "content": "Print a usage message summarizing the most useful command-line options.  Note that you\ncannot abbreviate this command.\n\n",
                        "flag": "-h",
                        "long": "--help"
                    },
                    {
                        "name": "--quiet, -q",
                        "content": "Make the output extra brief by suppressing any informational messages.\n\n",
                        "flag": "-q",
                        "long": "--quiet"
                    },
                    {
                        "name": "-v",
                        "content": "",
                        "flag": "-v"
                    },
                    {
                        "name": "--verbose",
                        "content": "Outputs  additional information while running.  You can increase the verbosity by giv‐\ning several verbose commands to dirmngr, such as ‘-vv’.\n\n\n--pem  Assume that the given certificate is in PEM (armored) format.\n\n\n--ocsp Do the check using the OCSP protocol and ignore any CRLs.\n\n",
                        "long": "--verbose"
                    },
                    {
                        "name": "--force-default-responder",
                        "content": "When checking using the OCSP protocol, force the use of the  default  OCSP  responder.\nThat is not to use the Reponder as given by the certificate.\n\n\n--ping Check whether the dirmngr daemon is up and running.\n\n",
                        "long": "--force-default-responder"
                    },
                    {
                        "name": "--cache-cert",
                        "content": "Put  the given certificate into the cache of a running dirmngr.  This is mainly useful\nfor debugging.\n\n",
                        "long": "--cache-cert"
                    },
                    {
                        "name": "--validate",
                        "content": "Validate the given certificate using dirmngr's  internal  validation  code.   This  is\nmainly useful for debugging.\n\n",
                        "long": "--validate"
                    },
                    {
                        "name": "--load-crl",
                        "content": "This  command expects a list of filenames with DER encoded CRL files.  With the option\n--url URLs are expected in place of filenames and they are loaded  directly  from  the\ngiven location.  All CRLs will be validated and then loaded into dirmngr's cache.\n\n",
                        "long": "--load-crl"
                    },
                    {
                        "name": "--lookup",
                        "content": "Take  the  remaining  arguments and run a lookup command on each of them.  The results\nare Base-64 encoded outputs (without header lines).  This may be used to retrieve cer‐\ntificates  from  a  server.  However the output format is not very well suited if more\nthan one certificate is returned.\n\n",
                        "long": "--lookup"
                    },
                    {
                        "name": "--url",
                        "content": "",
                        "long": "--url"
                    },
                    {
                        "name": "-u",
                        "content": "",
                        "flag": "-u"
                    },
                    {
                        "name": "--local",
                        "content": "",
                        "long": "--local"
                    },
                    {
                        "name": "-l",
                        "content": "",
                        "flag": "-l"
                    },
                    {
                        "name": "--squid-mode",
                        "content": "Run dirmngr-client in  a  mode  suitable  as  a  helper  program  for  Squid's  exter‐‐\nnalacltype option.\n\n\n",
                        "long": "--squid-mode"
                    }
                ]
            },
            "SEE ALSO": {
                "content": "dirmngr(8), gpgsm(1)\n\nThe  full  documentation  for  this tool is maintained as a Texinfo manual.  If GnuPG and the\ninfo program are properly installed at your site, the command\n\ninfo gnupg\n\nshould give you access to the complete manual including a menu structure and an index.\n\n\n\n\n\n\nGnuPG 2.2.27                                 2020-12-21                            DIRMNGR-CLIENT(1)",
                "subsections": []
            }
        }
    }
}