1cimcrl(8)                   System Manager's Manual                  cimcrl(8)
2
3
4

NAME

6       cimcrl - Add, remove or list X509 Certificate Revocation Lists in a PEM
7       format CRL store.
8

SYNOPSIS

10       cimcrl -a -f file
11
12       cimcrl -r -i issuer
13
14       cimcrl -l [ -i issuer ]
15
16       cimcrl --help
17
18       cimcrl --version
19
20
21   Remarks
22       The cimcrl command requires that the cimserver is running. This command
23       operates on a CRL store on the local system only.
24
25

DESCRIPTION

27       The  cimcrl  command  provides  a command line interface to manage X509
28       CRLs in the CRL store. The CRL store contains the CRLs used  to  revoke
29       certificates  in  the  CIM  Server  truststore. For more information on
30       truststore operations see the cimtrust(8)  command.
31
32       The add option of the cimcrl command adds an X509 CRL from  the  speci‐
33       fied  file  to the CRL store. If a CRL for the specified issuer already
34       exists in the CRL store, the CRL is replaced with the specified CRL.
35
36
37       The remove option of the cimcrl command removes the X509  CRL  matching
38       the specified issuer from the CRL store.
39
40       The  list  option  of the cimcrl command lists the X509 CRLs in the CRL
41       store. The list can be filtered by issuer.
42
43   Options
44       cimcrl recognizes the following options:
45
46              -a             Adds a CRL to the  truststore. If  the  specified
47                             file  does  not contain a valid X509 CRL an error
48                             message is returned and no action  is  taken.  If
49                             the  CRL  for the specified issuer already exists
50                             in the CRL store, it is replaced with the CRL  in
51                             the specified file
52
53              -r             Removes  a  CRL  from  the  truststore. If no CRL
54                             exists for the specified issuer , an  error  mes‐
55                             sage is returned and no action is taken.
56
57              -l             Displays the X509 CRLs in the truststore.
58
59              -f file        Specifies  a  PEM  format file containing an X509
60                             CRL.
61
62              -i issuer      Specifies the issuer name of the CRL.
63
64              --help         Displays the command help message.
65
66              --version      Displays the CIM Server version.
67

EXIT STATUS

69       When an error occurs, an error message is written to the standard error
70       stream and a non-zero exit status value is returned. The following exit
71       status values are defined:
72
73              0      Success
74
75              1      General error
76
77              2      Connection failed
78
79              3      Connection timed out
80
81              4      CRL does not exist
82

EXAMPLES

84       Add the CRL in class1crl.pem to the CRL store:
85
86       cimcrl -a -f class1crl.pem
87
88       Remove the CRL for a specified issuer:
89
90       cimcrl     -r     -i     "/C=US/ST=California/L=Cupertino/O=Smart     &
91       Secure/OU=Secure Software Division/CN=dev.admin.ss.com"
92
93       List all the X509 CRLs in the trust store:
94
95       cimcrl -l
96
97

SEE ALSO

99       cimserver(8), cimtrust(8), cimconfig(8).
100
101
102
103                                                                     cimcrl(8)
Impressum