diff options
| author | Rich Salz <rsalz@openssl.org> | 2014-09-18 21:45:41 -0400 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2014-09-18 21:45:41 -0400 |
| commit | e8185aea878a5a83712ad40a2740edc47442a1c3 (patch) | |
| tree | 78336f5f37380e3673c66bbd0b26b6da1e2d6e95 /doc | |
| parent | 99b00fd99330afb0be46265c3e28f25f938d3221 (diff) | |
RT3291: Add -crl and -revoke options to CA.pl
Document the new features
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/apps/CA.pl.pod | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/doc/apps/CA.pl.pod b/doc/apps/CA.pl.pod index d326101cde..92ae288748 100644 --- a/doc/apps/CA.pl.pod +++ b/doc/apps/CA.pl.pod @@ -89,6 +89,17 @@ is useful when creating intermediate CA from a root CA. this option is the same as B<-sign> except it expects a self signed certificate to be present in the file "newreq.pem". +=item B<-crl> + +generate a CRL + +=item B<-revoke certfile [reason]> + +revoke the certificate contained in the specified B<certfile>. An optional +reason may be specified, and must be one of: B<unspecified>, +B<keyCompromise>, B<CACompromise>, B<affiliationChanged>, B<superseded>, +B<cessationOfOperation>, B<certificateHold>, or B<removeFromCRL>. + =item B<-verify> verifies certificates against the CA certificate for "demoCA". If no certificates |