denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Document --online option for pki --verify and all exit codes

Browse Source
This commit is contained in:
Tobias Brunner
2014-06-30 13:25:13 +02:00
parent 33967467e2
commit ba2805c106
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pki/man/pki---verify.1.in
+10 -4
View File
@@ -10,6 +10,7 @@ pki \-\-verify \- Verify a certificate using a CA certificate
.OP \-\-in file .OP \-\-in file
.OP \-\-cacert file .OP \-\-cacert file
.OP \-\-debug level .OP \-\-debug level
.OP \-\-online
.YS .YS
. .
.SY pki\ \-\-verify .SY pki\ \-\-verify
@@ -44,12 +45,17 @@ Read command line options from \fIfile\fR.
X.509 certificate to verify. If not given it is read from \fISTDIN\fR. X.509 certificate to verify. If not given it is read from \fISTDIN\fR.
.TP .TP
.BI "\-c, \-\-cacert " file .BI "\-c, \-\-cacert " file
CA certificate to use. If not given the certificate is assumed to be CA certificate to use for trustchain verification. If not given the certificate
self-signed. is assumed to be self\-signed.
.TP
.BI "\-o, \-\-online
Enable online CRL/OCSP revocation checking.
. .
.SH "EXIT STATUS" .SH "EXIT STATUS"
The exit status is 0 if the certificate was verified successfully, and 2 if The exit status is 0 if the certificate was verified successfully, 1 if the
the verification failed. certificate is untrusted, 2 if the certificate's lifetimes are invalid, and 3
if the certificate was verified successfully but the online revocation check
indicated that it has been revoked.
. .
.SH "SEE ALSO" .SH "SEE ALSO"
. .