(hx509.info.gz) Issuing CRLs

Info Catalog

(hx509.info.gz) Issuing certificates

(hx509.info.gz) Top

(hx509.info.gz) Application requirements

 
 3.3 Issuing CRLs
 ================
 
 Create an empty CRL with not certificates revoked. Default expiration
 value is one year from now.
 
      hxtool crl-sign \
      	--crl-file=crl.der \
      	--signer=FILE:ca.pem
 
 Create a CRL with all certificates in the directory
 `/path/to/revoked/dir' included in the CRL as revoked.  Also make it
 expire one month from now.
 
      hxtool crl-sign \
      	--crl-file=crl.der \
              --signer=FILE:ca.pem \
      	--lifetime='1 month' \
              DIR:/path/to/revoked/dir
 

Info Catalog

(hx509.info.gz) Issuing certificates

(hx509.info.gz) Top

(hx509.info.gz) Application requirements