{ "content": [ { "type": "text", "text": "# openssl-crl (man)\n\n## NAME\n\nopenssl-crl - CRL command\n\n## SYNOPSIS\n\nopenssl crl [-help] [-inform DER|PEM] [-outform DER|PEM] [-key filename] [-keyform\nDER|PEM|P12] [-dateopt] [-text] [-in filename] [-out filename] [-gendelta filename] [-badsig]\n[-verify] [-noout] [-hash] [-hashold] [-fingerprint] [-crlnumber] [-issuer] [-lastupdate]\n[-nextupdate] [-nameopt option] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath]\n[-CAstore uri] [-no-CAstore] [-provider name] [-provider-path path] [-propquery propq]\n\n## DESCRIPTION\n\nThis command processes CRL files in DER or PEM format.\n\n## Sections\n\n- **NAME**\n- **SYNOPSIS**\n- **DESCRIPTION**\n- **OPTIONS** (25 subsections)\n- **EXAMPLES**\n- **BUGS**\n- **SEE ALSO**\n- **COPYRIGHT**\n\nUse structuredContent.sections for detailed options, examples, and full documentation.\n" } ], "structuredContent": { "command": "openssl-crl", "section": "", "mode": "man", "summary": "openssl-crl - CRL command", "synopsis": "openssl crl [-help] [-inform DER|PEM] [-outform DER|PEM] [-key filename] [-keyform\nDER|PEM|P12] [-dateopt] [-text] [-in filename] [-out filename] [-gendelta filename] [-badsig]\n[-verify] [-noout] [-hash] [-hashold] [-fingerprint] [-crlnumber] [-issuer] [-lastupdate]\n[-nextupdate] [-nameopt option] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath]\n[-CAstore uri] [-no-CAstore] [-provider name] [-provider-path path] [-propquery propq]", "tldr_summary": null, "tldr_examples": [], "tldr_source": null, "flags": [ { "flag": "", "long": null, "arg": null, "description": "Print out a usage message." }, { "flag": "", "long": null, "arg": null, "description": "The CRL input format; unspecified by default. See openssl-format-options(1) for details." }, { "flag": "", "long": null, "arg": null, "description": "The CRL output format; the default is PEM. See openssl-format-options(1) for details." }, { "flag": "", "long": null, "arg": null, "description": "The private key to be used to sign the CRL." }, { "flag": "", "long": null, "arg": null, "description": "The format of the private key file; unspecified by default. See openssl-format-options(1) for details." }, { "flag": "", "long": null, "arg": null, "description": "This specifies the input filename to read from or standard input if this option is not specified." }, { "flag": "", "long": null, "arg": null, "description": "Specifies the output filename to write to or standard output by default." }, { "flag": "", "long": null, "arg": null, "description": "Output a comparison of the main CRL and the one specified here." }, { "flag": "", "long": null, "arg": null, "description": "Corrupt the signature before writing it; this can be useful for testing." }, { "flag": "", "long": null, "arg": null, "description": "Specify the date output format. Values are: rfc822 and iso8601. Defaults to rfc822." }, { "flag": "", "long": null, "arg": null, "description": "Print out the CRL in text form." }, { "flag": "", "long": null, "arg": null, "description": "Verify the signature in the CRL." }, { "flag": "", "long": null, "arg": null, "description": "Don't output the encoded version of the CRL." }, { "flag": "", "long": null, "arg": null, "description": "Output the fingerprint of the CRL." }, { "flag": "", "long": null, "arg": null, "description": "Output the number of the CRL." }, { "flag": "", "long": null, "arg": null, "description": "Output a hash of the issuer name. This can be use to lookup CRLs in a directory by issuer name." }, { "flag": "", "long": null, "arg": null, "description": "Outputs the \"hash\" of the CRL issuer name using the older algorithm as used by OpenSSL before version 1.0.0." }, { "flag": "", "long": null, "arg": null, "description": "Output the issuer name." }, { "flag": "", "long": null, "arg": null, "description": "Output the lastUpdate field." }, { "flag": "", "long": null, "arg": null, "description": "Output the nextUpdate field." }, { "flag": "", "long": null, "arg": null, "description": "This specifies how the subject or issuer names are displayed. See openssl-namedisplay-options(1) for details." }, { "flag": "", "long": null, "arg": null, "description": "See \"Trusted Certificate Options\" in openssl-verification-options(1) for details." }, { "flag": "", "long": null, "arg": null, "description": "" }, { "flag": "", "long": null, "arg": null, "description": "" }, { "flag": "", "long": null, "arg": null, "description": "See \"Provider Options\" in openssl(1), provider(7), and property(7)." } ], "examples": [ "Convert a CRL file from PEM to DER:", "openssl crl -in crl.pem -outform DER -out crl.der", "Output the text form of a DER encoded certificate:", "openssl crl -in crl.der -text -noout" ], "see_also": [ { "name": "openssl", "section": "1", "url": "https://www.chedong.com/phpMan.php/man/openssl/1/json" }, { "name": "openssl-crl2pkcs7", "section": "1", "url": "https://www.chedong.com/phpMan.php/man/openssl-crl2pkcs7/1/json" }, { "name": "openssl-ca", "section": "1", "url": "https://www.chedong.com/phpMan.php/man/openssl-ca/1/json" }, { "name": "openssl-x509", "section": "1", "url": "https://www.chedong.com/phpMan.php/man/openssl-x509/1/json" }, { "name": "osslstore-file", "section": "7", "url": "https://www.chedong.com/phpMan.php/man/osslstore-file/7/json" } ], "section_outline": [ { "name": "NAME", "lines": 2, "subsections": [] }, { "name": "SYNOPSIS", "lines": 6, "subsections": [] }, { "name": "DESCRIPTION", "lines": 2, "subsections": [] }, { "name": "OPTIONS", "lines": 1, "subsections": [ { "name": "-help", "lines": 2 }, { "name": "-inform", "lines": 2 }, { "name": "-outform", "lines": 2 }, { "name": "-key", "lines": 2 }, { "name": "-keyform", "lines": 3 }, { "name": "-in", "lines": 3 }, { "name": "-out", "lines": 2 }, { "name": "-gendelta", "lines": 2 }, { "name": "-badsig", "lines": 2 }, { "name": "-dateopt", "lines": 2 }, { "name": "-text", "lines": 2 }, { "name": "-verify", "lines": 2 }, { "name": "-noout", "lines": 2 }, { "name": "-fingerprint", "lines": 2 }, { "name": "-crlnumber", "lines": 2 }, { "name": "-hash", "lines": 3 }, { "name": "-hash", "lines": 3 }, { "name": "-issuer", "lines": 2 }, { "name": "-lastupdate", "lines": 2 }, { "name": "-nextupdate", "lines": 2 }, { "name": "-nameopt", "lines": 3 }, { "name": "-CAfile -no-CAfile -CApath -no-CApath -CAstore -no-CAstore", "lines": 2 }, { "name": "-provider", "lines": 1 }, { "name": "-provider-path", "lines": 1 }, { "name": "-propquery", "lines": 2 } ] }, { "name": "EXAMPLES", "lines": 8, "subsections": [] }, { "name": "BUGS", "lines": 2, "subsections": [] }, { "name": "SEE ALSO", "lines": 2, "subsections": [] }, { "name": "COPYRIGHT", "lines": 9, "subsections": [] } ], "sections": { "NAME": { "content": "openssl-crl - CRL command\n", "subsections": [] }, "SYNOPSIS": { "content": "openssl crl [-help] [-inform DER|PEM] [-outform DER|PEM] [-key filename] [-keyform\nDER|PEM|P12] [-dateopt] [-text] [-in filename] [-out filename] [-gendelta filename] [-badsig]\n[-verify] [-noout] [-hash] [-hashold] [-fingerprint] [-crlnumber] [-issuer] [-lastupdate]\n[-nextupdate] [-nameopt option] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath]\n[-CAstore uri] [-no-CAstore] [-provider name] [-provider-path path] [-propquery propq]\n", "subsections": [] }, "DESCRIPTION": { "content": "This command processes CRL files in DER or PEM format.\n", "subsections": [] }, "OPTIONS": { "content": "", "subsections": [ { "name": "-help", "content": "Print out a usage message.\n" }, { "name": "-inform", "content": "The CRL input format; unspecified by default. See openssl-format-options(1) for details.\n" }, { "name": "-outform", "content": "The CRL output format; the default is PEM. See openssl-format-options(1) for details.\n" }, { "name": "-key", "content": "The private key to be used to sign the CRL.\n" }, { "name": "-keyform", "content": "The format of the private key file; unspecified by default. See\nopenssl-format-options(1) for details.\n" }, { "name": "-in", "content": "This specifies the input filename to read from or standard input if this option is not\nspecified.\n" }, { "name": "-out", "content": "Specifies the output filename to write to or standard output by default.\n" }, { "name": "-gendelta", "content": "Output a comparison of the main CRL and the one specified here.\n" }, { "name": "-badsig", "content": "Corrupt the signature before writing it; this can be useful for testing.\n" }, { "name": "-dateopt", "content": "Specify the date output format. Values are: rfc822 and iso8601. Defaults to rfc822.\n" }, { "name": "-text", "content": "Print out the CRL in text form.\n" }, { "name": "-verify", "content": "Verify the signature in the CRL.\n" }, { "name": "-noout", "content": "Don't output the encoded version of the CRL.\n" }, { "name": "-fingerprint", "content": "Output the fingerprint of the CRL.\n" }, { "name": "-crlnumber", "content": "Output the number of the CRL.\n" }, { "name": "-hash", "content": "Output a hash of the issuer name. This can be use to lookup CRLs in a directory by issuer\nname.\n" }, { "name": "-hash", "content": "Outputs the \"hash\" of the CRL issuer name using the older algorithm as used by OpenSSL\nbefore version 1.0.0.\n" }, { "name": "-issuer", "content": "Output the issuer name.\n" }, { "name": "-lastupdate", "content": "Output the lastUpdate field.\n" }, { "name": "-nextupdate", "content": "Output the nextUpdate field.\n" }, { "name": "-nameopt", "content": "This specifies how the subject or issuer names are displayed. See\nopenssl-namedisplay-options(1) for details.\n" }, { "name": "-CAfile -no-CAfile -CApath -no-CApath -CAstore -no-CAstore", "content": "See \"Trusted Certificate Options\" in openssl-verification-options(1) for details.\n" }, { "name": "-provider", "content": "" }, { "name": "-provider-path", "content": "" }, { "name": "-propquery", "content": "See \"Provider Options\" in openssl(1), provider(7), and property(7).\n" } ] }, "EXAMPLES": { "content": "Convert a CRL file from PEM to DER:\n\nopenssl crl -in crl.pem -outform DER -out crl.der\n\nOutput the text form of a DER encoded certificate:\n\nopenssl crl -in crl.der -text -noout\n", "subsections": [] }, "BUGS": { "content": "Ideally it should be possible to create a CRL using appropriate options and files too.\n", "subsections": [] }, "SEE ALSO": { "content": "openssl(1), openssl-crl2pkcs7(1), openssl-ca(1), openssl-x509(1), osslstore-file(7)\n", "subsections": [] }, "COPYRIGHT": { "content": "Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.\n\nLicensed under the Apache License 2.0 (the \"License\"). You may not use this file except in\ncompliance with the License. You can obtain a copy in the file LICENSE in the source\ndistribution or at .\n\n\n\n3.0.2 2026-06-02 OPENSSL-CRL(1SSL)", "subsections": [] } } } }