clean-crl (8) - Linux Man Pages
clean-crl: remove orphaned CRL like files from a certificate directory
NAMEclean-crl - remove orphaned CRL like files from a certificate directory
SYNOPSISclean-crl [-l crlpath] [-v] [-V] [-n] [-h]
DESCRIPTIONThe clean-crl utility will remove CRL like files named hash.rn from the directory specified with the -l option if there is no corresponding .n file in the same. In effect, if the directory is solely used to hold CA certificates in the common OpenSSL format, it will thus remove CRL files for which the corresponding CA does not or no longer exists in the directory.
- -h --help
- Show help text.
- -l --cadir metadata-directory
The script will search this directory for files with the
There is no default - a common choice is /etc/pki/tls/certs,
/etc/openldap/cacerts, or /etc/grid-security/certificates.
- -V --version
Display version number (same as corresponding fetch-crl)
- -v --verbose
- -n --dryrun
Do not actually remove any files (useful primarily with -v)
NOTESThis tool does not check the contents of the files removed, and will blindly unlink any file which even remotely looks like an OpenSSL CRL file. Use with extreme caution.
DIAGNOSTICSExit status is normally 0; if an error occurs, exit status is 1 and diagnostics will be written to standard error.
LICENSELicensed under the Apache License, Version 2.0 (the "License");
BUGSDoes not check the contents of the files removed.