denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Document --online option for pki --verify and all exit codes

Browse Source
This commit is contained in:
Tobias Brunner
2014-06-30 13:25:13 +02:00
parent 33967467e2
commit ba2805c106
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pki/man/pki---verify.1.in
+11 -5
View File
@@ -10,6 +10,7 @@ pki \-\-verify \- Verify a certificate using a CA certificate
.OP \-\-in file
.OP \-\-cacert file
.OP \-\-debug level
.OP \-\-online
.YS
.
.SY pki\ \-\-verify
@@ -44,13 +45,18 @@ Read command line options from \fIfile\fR.
X.509 certificate to verify. If not given it is read from \fISTDIN\fR.
.TP
.BI "\-c, \-\-cacert " file
CA certificate to use. If not given the certificate is assumed to be
self-signed.
CA certificate to use for trustchain verification. If not given the certificate
is assumed to be self\-signed.
.TP
.BI "\-o, \-\-online
Enable online CRL/OCSP revocation checking.
.
.SH "EXIT STATUS"
The exit status is 0 if the certificate was verified successfully, and 2 if
the verification failed.
The exit status is 0 if the certificate was verified successfully, 1 if the
certificate is untrusted, 2 if the certificate's lifetimes are invalid, and 3
if the certificate was verified successfully but the online revocation check
indicated that it has been revoked.
.
.SH "SEE ALSO"
.
.BR pki (1)
.BR pki (1)