CRLUTIL(1) NSS Security Tools CRLUTIL(1) (NAME) crlutil - (CRL) NSS (SYNOPSIS) crlutil [] [[]] (STATUS) . Mozilla NSS bug 836477[1] . (DESCRIPTION) (CRL) crlutil (CRL) () NSS CRL . ( certutil ) . . << >> (Using the Security Module Database Tool) . << >> (Using the Certificate Database Tool) . crlutil option [arguments] options arguments . . . -H . (COMMANDS AND OPTIONS) . . crlutil : -D (CRL) . -E CRL . -G (CRL) . -I (Import) CRL . -L CRL . -M CRL . ASN.1 . -S CRL . . -a ASCII ASCII . RFC #1113 . -B (CA). -c crl-gen-file / crl . crl-script-file . -M|-G -c crl-script-file crlutil . -d directory . $HOME/.netscape ( ~/.netscape) . Windows NT . NSS . -f password-file . . . -i crl-file CRL . -l algorithm-name . : MD2 | MD4 | MD5 | SHA1 | SHA256 | SHA384 | SHA512 -n nickname (nickname) . . -o output-file CRL . output-file . . -P dbprefix NSS ( my_cert8.db my_key3.db). . . -t crl-type CRL. : 0 - SEC_KRL_TYPE 1 - SEC_CRL_TYPE. . -u url (url). -w pwd-string . -Z algorithm () CRL. CRL (CRL GENERATION SCRIPT SYNTAX) CRL : * # . * "this update" "next update" CRL: update=YYYYMMDDhhmmssZ nextupdate=YYYYMMDDhhmmssZ "next update" . GeneralizedTime (YYYYMMDDhhmmssZ). : 20050204153000Z * CRL crl: addext extension-name critical/non-critical [arg1[arg2 ...]] : extension-name: . critical/non-critical: 1 0 . arg1, arg2: . addext addcert . * () CRL: addcert range date range: : . . . date: . GeneralizedTime (YYYYMMDDhhmmssZ). * () CRL: rmcert range : range: : . . . * () CRL: range new-range : new-range: : . . . (Implemented Extensions) CRL CRL . RFC #3280 . * (Authority Key Identifier): CRL . authKeyId critical [key-id | dn cert-serial] : authKeyIdent: . critical: 1 0. 1 0 . key-id: (octet string) . dn: (CA) . cert-serial: . * (Issuer Alternative Name): CRL . rfc822 ( ) DNS IP URI . issuerAltNames non-critical name-list : subjAltNames: . 0 . name-list: . * CRL (CRL Number): CRL CRL CRL CRL . CRL CRL . crlNumber non-critical number : crlNumber: . critical: 0 . number: long CRL . * (Revocation Reason Code): reasonCode CRL . reasonCode non-critical code : reasonCode: . non-critical: 0 . code: : unspecified (0), keyCompromise (1), cACompromise (2), affiliationChanged (3), superseded (4), cessationOfOperation (5), certificateHold (6), removeFromCRL (8), privilegeWithdrawn (9), aACompromise (10) * (Invalidity Date): CRL . invalidityDate non-critical date : crlNumber: . non-critical: 0 . date: . GeneralizedTime (YYYYMMDDhhmmssZ). (USAGE) . . << >> . * CRL: crlutil -G|-M -c crl-gen-file -n nickname [-i crl] [-u url] [-d keydir] [-P dbprefix] [-l alg] [-a] [-B] * CRL CRL : crlutil -L [-n crl-name] [-d krydir] * CRL : crlutil -D -n nickname [-d keydir] [-P dbprefix] * CRL : crlutil -E [-d keydir] [-P dbprefix] * CRL : crlutil -D -n nickname [-d keydir] [-P dbprefix] * CRL : crlutil -E [-d keydir] [-P dbprefix] * CRL : crlutil -I -i crl [-t crlType] [-u url] [-d keydir] [-P dbprefix] [-B] (SEE ALSO) certutil(1) (ADDITIONAL RESOURCES) NSS NSS ( JSS) NSS http://www.mozilla.org/projects/security/pki/nss . NSS NSS . : https://lists.mozilla.org/listinfo/dev-tech-crypto IRC: Freenode #dogtag-pki (AUTHORS) NSS Netscape Red Hat Sun Oracle Mozilla Google . : Elio Maldonado Deon Lackey . (LICENSE) (Mozilla Public License) . . MPL http://mozilla.org/MPL/2.0 . (NOTES) 1. Mozilla NSS bug 836477 https://bugzilla.mozilla.org/show_bug.cgi?id=836477 nss-tools 19 May 2021 CRLUTIL(1)