Linux "crl" Command Line Options and Examples
CRL utility

The crl command processes CRL files in DER or PEM format..


Usage:

openssl crl [-help] [-inform PEM|DER] [-outform PEM|DER] [-text] [-in filename] [-out filename] [-nameopt option] [-noout] [-hash]
[-issuer] [-lastupdate] [-nextupdate] [-CAfile file] [-CApath dir]






Command Line Options:

-help
Print out a usage message.
crl -help ...
-inform
This specifies the input format. DER format is DER encoded CRL structure. PEM (the default) is a base64 encoded version of theDER form with header and footer lines.
crl -inform ...
-outform
This specifies the output format, the options have the same meaning as the -inform option.
crl -outform ...
-in
This specifies the input filename to read from or standard input if this option is not specified.
crl -in ...
-out
specifies the output filename to write to or standard output by default.
crl -out ...
-text
print out the CRL in text form.
crl -text ...
-nameopt
option which determines how the subject or issuer names are displayed. See the description of -nameopt in x509(1).
crl -nameopt ...
-noout
don't output the encoded version of the CRL.
crl -noout ...
-hash
output a hash of the issuer name. This can be use to lookup CRLs in a directory by issuer name.
crl -hash ...
-hash_old
outputs the "hash" of the CRL issuer name using the older algorithm as used by OpenSSL versions before 1.0.0.
crl -hash_old ...
-issuer
output the issuer name.
crl -issuer ...
-lastupdate
output the lastUpdate field.
crl -lastupdate ...
-nextupdate
output the nextUpdate field.
crl -nextupdate ...
-CAfile
verify the signature on a CRL by looking up the issuing certificate in file
crl -CAfile ...
-CApath
verify the signature on a CRL by looking up the issuing certificate in dir. This directory must be a standard certificatedirectory: that is a hash of each subject name (using x509 -hash) should be linked to each certificate.NOTESThe PEM CRL format uses the header and footer lines:
crl -CApath ...