170 lines
4.9 KiB
HTML
170 lines
4.9 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of CRL2PKCS7</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>CRL2PKCS7</H1>
|
|
Section: OpenSSL (1SSL)<BR>Updated: 2021-03-22<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
openssl-crl2pkcs7, crl2pkcs7 - Create a PKCS#7 structure from a CRL and certificates
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
|
|
|
|
<B>openssl</B> <B>crl2pkcs7</B>
|
|
[<B>-help</B>]
|
|
[<B>-inform PEM|DER</B>]
|
|
[<B>-outform PEM|DER</B>]
|
|
[<B>-in filename</B>]
|
|
[<B>-out filename</B>]
|
|
[<B>-certfile filename</B>]
|
|
[<B>-nocrl</B>]
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
|
|
|
|
The <B>crl2pkcs7</B> command takes an optional <FONT SIZE="-1">CRL</FONT> and one or more
|
|
certificates and converts them into a PKCS#7 degenerate ``certificates
|
|
only'' structure.
|
|
<A NAME="lbAE"> </A>
|
|
<H2>OPTIONS</H2>
|
|
|
|
|
|
|
|
<DL COMPACT>
|
|
<DT id="1"><B>-help</B><DD>
|
|
|
|
|
|
Print out a usage message.
|
|
<DT id="2"><B>-inform DER|PEM</B><DD>
|
|
|
|
|
|
This specifies the <FONT SIZE="-1">CRL</FONT> input format. <B></B><FONT SIZE="-1"><B>DER</B></FONT><B></B> format is <FONT SIZE="-1">DER</FONT> encoded <FONT SIZE="-1">CRL</FONT>
|
|
structure.<B></B><FONT SIZE="-1"><B>PEM</B></FONT><B></B> (the default) is a base64 encoded version of
|
|
the <FONT SIZE="-1">DER</FONT> form with header and footer lines. The default format is <FONT SIZE="-1">PEM.</FONT>
|
|
<DT id="3"><B>-outform DER|PEM</B><DD>
|
|
|
|
|
|
This specifies the PKCS#7 structure output format. <B></B><FONT SIZE="-1"><B>DER</B></FONT><B></B> format is <FONT SIZE="-1">DER</FONT>
|
|
encoded PKCS#7 structure.<B></B><FONT SIZE="-1"><B>PEM</B></FONT><B></B> (the default) is a base64 encoded version of
|
|
the <FONT SIZE="-1">DER</FONT> form with header and footer lines. The default format is <FONT SIZE="-1">PEM.</FONT>
|
|
<DT id="4"><B>-in filename</B><DD>
|
|
|
|
|
|
This specifies the input filename to read a <FONT SIZE="-1">CRL</FONT> from or standard input if this
|
|
option is not specified.
|
|
<DT id="5"><B>-out filename</B><DD>
|
|
|
|
|
|
Specifies the output filename to write the PKCS#7 structure to or standard
|
|
output by default.
|
|
<DT id="6"><B>-certfile filename</B><DD>
|
|
|
|
|
|
Specifies a filename containing one or more certificates in <B></B><FONT SIZE="-1"><B>PEM</B></FONT><B></B> format.
|
|
All certificates in the file will be added to the PKCS#7 structure. This
|
|
option can be used more than once to read certificates form multiple
|
|
files.
|
|
<DT id="7"><B>-nocrl</B><DD>
|
|
|
|
|
|
Normally a <FONT SIZE="-1">CRL</FONT> is included in the output file. With this option no <FONT SIZE="-1">CRL</FONT> is
|
|
included in the output file and a <FONT SIZE="-1">CRL</FONT> is not read from the input file.
|
|
</DL>
|
|
<A NAME="lbAF"> </A>
|
|
<H2>EXAMPLES</H2>
|
|
|
|
|
|
|
|
Create a PKCS#7 structure from a certificate and <FONT SIZE="-1">CRL:</FONT>
|
|
<P>
|
|
|
|
|
|
|
|
<PRE>
|
|
openssl crl2pkcs7 -in crl.pem -certfile cert.pem -out p7.pem
|
|
|
|
</PRE>
|
|
|
|
|
|
<P>
|
|
|
|
Creates a PKCS#7 structure in <FONT SIZE="-1">DER</FONT> format with no <FONT SIZE="-1">CRL</FONT> from several
|
|
different certificates:
|
|
<P>
|
|
|
|
|
|
|
|
<PRE>
|
|
openssl crl2pkcs7 -nocrl -certfile newcert.pem
|
|
-certfile demoCA/cacert.pem -outform DER -out p7.der
|
|
|
|
</PRE>
|
|
|
|
|
|
<A NAME="lbAG"> </A>
|
|
<H2>NOTES</H2>
|
|
|
|
|
|
|
|
The output file is a PKCS#7 signed data structure containing no signers and
|
|
just certificates and an optional <FONT SIZE="-1">CRL.</FONT>
|
|
<P>
|
|
|
|
This utility can be used to send certificates and CAs to Netscape as part of
|
|
the certificate enrollment process. This involves sending the <FONT SIZE="-1">DER</FONT> encoded output
|
|
as <FONT SIZE="-1">MIME</FONT> type application/x-x509-user-cert.
|
|
<P>
|
|
|
|
The <B></B><FONT SIZE="-1"><B>PEM</B></FONT><B></B> encoded form with the header and footer lines removed can be used to
|
|
install user certificates and CAs in <FONT SIZE="-1">MSIE</FONT> using the Xenroll control.
|
|
<A NAME="lbAH"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?1+pkcs7">pkcs7</A></B>(1)
|
|
<A NAME="lbAI"> </A>
|
|
<H2>COPYRIGHT</H2>
|
|
|
|
|
|
|
|
Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
|
|
<P>
|
|
|
|
Licensed under the OpenSSL license (the ``License''). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file <FONT SIZE="-1">LICENSE</FONT> in the source distribution or at
|
|
<<A HREF="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</A>>.
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="8"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="9"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="10"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="11"><A HREF="#lbAE">OPTIONS</A><DD>
|
|
<DT id="12"><A HREF="#lbAF">EXAMPLES</A><DD>
|
|
<DT id="13"><A HREF="#lbAG">NOTES</A><DD>
|
|
<DT id="14"><A HREF="#lbAH">SEE ALSO</A><DD>
|
|
<DT id="15"><A HREF="#lbAI">COPYRIGHT</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:05:09 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|