From: Rich Salz <rsalz@openssl.org>
Date: Fri, 19 Sep 2014 01:45:41 +0000 (-0400)
Subject: RT3291: Add -crl and -revoke options to CA.pl
X-Git-Tag: master-post-reformat~377
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=e8185aea878a5a83712ad40a2740edc47442a1c3;p=oweals%2Fopenssl.git

RT3291: Add -crl and -revoke options to CA.pl

Document the new features

Reviewed-by: Tim Hudson <tjh@openssl.org>
---

diff --git a/doc/apps/CA.pl.pod b/doc/apps/CA.pl.pod
index d326101cde..92ae288748 100644
--- a/doc/apps/CA.pl.pod
+++ b/doc/apps/CA.pl.pod
@@ -89,6 +89,17 @@ is useful when creating intermediate CA from a root CA.
 this option is the same as B<-sign> except it expects a self signed certificate
 to be present in the file "newreq.pem".
 
+=item B<-crl>
+
+generate a CRL
+
+=item B<-revoke certfile [reason]>
+
+revoke the certificate contained in the specified B<certfile>. An optional
+reason may be specified, and must be one of: B<unspecified>,
+B<keyCompromise>, B<CACompromise>, B<affiliationChanged>, B<superseded>,
+B<cessationOfOperation>, B<certificateHold>, or B<removeFromCRL>.
+
 =item B<-verify>
 
 verifies certificates against the CA certificate for "demoCA". If no certificates