certtool.1   certtool.1 
skipping to change at line 47 skipping to change at line 47
-c, --generate-certificate -c, --generate-certificate
Generate a signed certificate. Generate a signed certificate.
--generate-proxy --generate-proxy
Generates a proxy certificate. Generates a proxy certificate.
--generate-crl --generate-crl
Generate a CRL. Generate a CRL.
This option generates a CRL. When combined with --load-crl it
would use the loaded CRL
as base for the generated (i.e., all revoked certificates in
the base will be copied to
the new CRL).
-u, --update-certificate -u, --update-certificate
Update a signed certificate. Update a signed certificate.
-p, --generate-privkey -p, --generate-privkey
Generate a private key. Generate a private key.
-q, --generate-request -q, --generate-request
Generate a PKCS #10 certificate request. This option must no t appear in combination Generate a PKCS #10 certificate request. This option must no t appear in combination
with any of the following options: infile. with any of the following options: infile.
skipping to change at line 624 skipping to change at line 628
# Options for generating a CRL # Options for generating a CRL
# The number of days the next CRL update will be due. # The number of days the next CRL update will be due.
# next CRL update will be in 43 days # next CRL update will be in 43 days
#crl_next_update = 43 #crl_next_update = 43
# this is the 5th CRL by this CA # this is the 5th CRL by this CA
# Comment the field for a time-based number. # Comment the field for a time-based number.
#crl_number = 5 #crl_number = 5
# Specify the update dates more precisely.
#crl_this_update_date = "2004-02-29 16:21:42"
#crl_next_update_date = "2025-02-29 16:24:41"
# The date that the certificates will be made seen as
# being revoked.
#crl_revocation_date = "2025-02-29 16:24:41"
EXAMPLES EXAMPLES
Generating private keys Generating private keys
To create an RSA private key, run: To create an RSA private key, run:
$ certtool --generate-privkey --outfile key.pem --rsa $ certtool --generate-privkey --outfile key.pem --rsa
To create a DSA or elliptic curves (ECDSA) private key use the above command combined with To create a DSA or elliptic curves (ECDSA) private key use the above command combined with
'dsa' or 'ecc' options. 'dsa' or 'ecc' options.
Generating certificate requests Generating certificate requests
To create a certificate request (needed when the certificate is iss ued by another party), To create a certificate request (needed when the certificate is iss ued by another party),
skipping to change at line 726 skipping to change at line 738
COPYRIGHT COPYRIGHT
Copyright (C) 2000-2015 Free Software Foundation, and others all rig hts reserved. This pro‐ Copyright (C) 2000-2015 Free Software Foundation, and others all rig hts reserved. This pro‐
gram is released under the terms of the GNU General Public License, version 3 or later. gram is released under the terms of the GNU General Public License, version 3 or later.
BUGS BUGS
Please send bug reports to: bugs@gnutls.org Please send bug reports to: bugs@gnutls.org
NOTES NOTES
This manual page was AutoGen-erated from the certtool option definit ions. This manual page was AutoGen-erated from the certtool option definit ions.
3.4.4 10 Aug 2015 certtool(1) 3.4.5 12 Sep 2015 certtool(1)
 End of changes. 3 change blocks. 
0 lines changed or deleted 14 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/