Automatically generated by Pod::Man 4.07 (Pod::Simple 3.32) Standard preamble: ========================================================================
NAMEcrl2pkcs7 - Create a PKCS#7 structure from a CRL and certificates.
SYNOPSISopenssl crl2pkcs7 [-inform PEM|DER] [-outform PEM|DER] [-in filename] [-out filename] [-certfile filename] [-nocrl]
DESCRIPTIONThe crl2pkcs7 command takes an optional
CRLand one or more certificates and converts them into a PKCS#7 degenerate ``certificates only'' structure.
- -inform DER|PEM
This specifies the CRLinput format.DERformat isDERencodedCRLstructure.PEM(the default) is a base64 encoded version of theDERform with header and footer lines.
- -outform DER|PEM
This specifies the PKCS#7 structure output format. DERformat isDERencoded PKCS#7 structure.PEM(the default) is a base64 encoded version of theDERform with header and footer lines.
- -in filename
This specifies the input filename to read a CRLfrom or standard input if this option is not specified.
- -out filename
- specifies the output filename to write the PKCS#7 structure to or standard output by default.
- -certfile filename
specifies a filename containing one or more certificates in PEMformat. All certificates in the file will be added to the PKCS#7 structure. This option can be used more than once to read certificates form multiple files.
normally a CRLis included in the output file. With this option noCRLis included in the output file and aCRLis not read from the input file.
EXAMPLESCreate a PKCS#7 structure from a certificate and
openssl crl2pkcs7 -in crl.pem -certfile cert.pem -out p7.pem
Creates a PKCS#7 structure in
DERformat with no
CRLfrom several different certificates:
openssl crl2pkcs7 -nocrl -certfile newcert.pem -certfile demoCA/cacert.pem -outform DER -out p7.der
NOTESThe output file is a PKCS#7 signed data structure containing no signers and just certificates and an optional
This utility can be used to send certificates and CAs to Netscape as part of the certificate enrollment process. This involves sending the
DERencoded output as
PEMencoded form with the header and footer lines removed can be used to install user certificates and CAs in
MSIEusing the Xenroll control.