1OPENSSL-STOREUTL(1ossl)             OpenSSL            OPENSSL-STOREUTL(1ossl)
2
3
4

NAME

6       openssl-storeutl - STORE command
7

SYNOPSIS

9       openssl storeutl [-help] [-out file] [-noout] [-passin arg] [-text arg]
10       [-r] [-certs] [-keys] [-crls] [-subject arg] [-issuer arg] [-serial
11       arg] [-alias arg] [-fingerprint arg] [-digest] [-engine id] [-provider
12       name] [-provider-path path] [-propquery propq] uri
13

DESCRIPTION

15       This command can be used to display the contents (after decryption as
16       the case may be) fetched from the given URI.
17

OPTIONS

19       -help
20           Print out a usage message.
21
22       -out filename
23           specifies the output filename to write to or standard output by
24           default.
25
26       -noout
27           this option prevents output of the PEM data.
28
29       -passin arg
30           the key password source. For more information about the format of
31           arg see openssl-passphrase-options(1).
32
33       -text
34           Prints out the objects in text form, similarly to the -text output
35           from openssl-x509(1), openssl-pkey(1), etc.
36
37       -r  Fetch objects recursively when possible.
38
39       -certs
40       -keys
41       -crls
42           Only select the certificates, keys or CRLs from the given URI.
43           However, if this URI would return a set of names (URIs), those are
44           always returned.
45
46           Note that all options must be given before the uri argument.
47           Otherwise they are ignored.
48
49       -subject arg
50           Search for an object having the subject name arg.
51
52           The arg must be formatted as
53           "/type0=value0/type1=value1/type2=...".  Special characters may be
54           escaped by "\" (backslash), whitespace is retained.  Empty values
55           are permitted but are ignored for the search.  That is, a search
56           with an empty value will have the same effect as not specifying the
57           type at all.  Giving a single "/" will lead to an empty sequence of
58           RDNs (a NULL-DN).  Multi-valued RDNs can be formed by placing a "+"
59           character instead of a "/" between the AttributeValueAssertions
60           (AVAs) that specify the members of the set.
61
62           Example:
63
64           "/DC=org/DC=OpenSSL/DC=users/UID=123456+CN=John Doe"
65
66       -issuer arg
67       -serial arg
68           Search for an object having the given issuer name and serial
69           number.  These two options must be used together.  The issuer arg
70           must be formatted as "/type0=value0/type1=value1/type2=...",
71           characters may be escaped by \ (backslash), no spaces are skipped.
72           The serial arg may be specified as a decimal value or a hex value
73           if preceded by "0x".
74
75       -alias arg
76           Search for an object having the given alias.
77
78       -fingerprint arg
79           Search for an object having the given fingerprint.
80
81       -digest
82           The digest that was used to compute the fingerprint given with
83           -fingerprint.
84
85       -engine id
86           See "Engine Options" in openssl(1).  This option is deprecated.
87
88       -provider name
89       -provider-path path
90       -propquery propq
91           See "Provider Options" in openssl(1), provider(7), and property(7).
92

SEE ALSO

94       openssl(1)
95

HISTORY

97       This command was added in OpenSSL 1.1.1.
98
99       The -engine option was deprecated in OpenSSL 3.0.
100

102       Copyright 2016-2023 The OpenSSL Project Authors. All Rights Reserved.
103
104       Licensed under the Apache License 2.0 (the "License").  You may not use
105       this file except in compliance with the License.  You can obtain a copy
106       in the file LICENSE in the source distribution or at
107       <https://www.openssl.org/source/license.html>.
108
109
110
1113.1.1                             2023-08-31           OPENSSL-STOREUTL(1ossl)
Impressum