1*b0d17251Schristos=pod 2*b0d17251Schristos{- OpenSSL::safe::output_do_not_edit_headers(); -} 3*b0d17251Schristos 4*b0d17251Schristos=head1 NAME 5*b0d17251Schristos 6*b0d17251Schristosopenssl-crl2pkcs7 - Create a PKCS#7 structure from a CRL and certificates 7*b0d17251Schristos 8*b0d17251Schristos=head1 SYNOPSIS 9*b0d17251Schristos 10*b0d17251SchristosB<openssl> B<crl2pkcs7> 11*b0d17251Schristos[B<-help>] 12*b0d17251Schristos[B<-inform> B<DER>|B<PEM>] 13*b0d17251Schristos[B<-outform> B<DER>|B<PEM>] 14*b0d17251Schristos[B<-in> I<filename>] 15*b0d17251Schristos[B<-out> I<filename>] 16*b0d17251Schristos[B<-certfile> I<filename>] 17*b0d17251Schristos[B<-nocrl>] 18*b0d17251Schristos{- $OpenSSL::safe::opt_provider_synopsis -} 19*b0d17251Schristos 20*b0d17251Schristos=head1 DESCRIPTION 21*b0d17251Schristos 22*b0d17251SchristosThis command takes an optional CRL and one or more 23*b0d17251Schristoscertificates and converts them into a PKCS#7 degenerate "certificates 24*b0d17251Schristosonly" structure. 25*b0d17251Schristos 26*b0d17251Schristos=head1 OPTIONS 27*b0d17251Schristos 28*b0d17251Schristos=over 4 29*b0d17251Schristos 30*b0d17251Schristos=item B<-help> 31*b0d17251Schristos 32*b0d17251SchristosPrint out a usage message. 33*b0d17251Schristos 34*b0d17251Schristos=item B<-inform> B<DER>|B<PEM> 35*b0d17251Schristos 36*b0d17251SchristosThe input format of the CRL; the default is B<PEM>. 37*b0d17251SchristosSee L<openssl-format-options(1)> for details. 38*b0d17251Schristos 39*b0d17251Schristos=item B<-outform> B<DER>|B<PEM> 40*b0d17251Schristos 41*b0d17251SchristosThe output format of the PKCS#7 object; the default is B<PEM>. 42*b0d17251SchristosSee L<openssl-format-options(1)> for details. 43*b0d17251Schristos 44*b0d17251Schristos=item B<-in> I<filename> 45*b0d17251Schristos 46*b0d17251SchristosThis specifies the input filename to read a CRL from or standard input if this 47*b0d17251Schristosoption is not specified. 48*b0d17251Schristos 49*b0d17251Schristos=item B<-out> I<filename> 50*b0d17251Schristos 51*b0d17251SchristosSpecifies the output filename to write the PKCS#7 structure to or standard 52*b0d17251Schristosoutput by default. 53*b0d17251Schristos 54*b0d17251Schristos=item B<-certfile> I<filename> 55*b0d17251Schristos 56*b0d17251SchristosSpecifies a filename containing one or more certificates in B<PEM> format. 57*b0d17251SchristosAll certificates in the file will be added to the PKCS#7 structure. This 58*b0d17251Schristosoption can be used more than once to read certificates from multiple 59*b0d17251Schristosfiles. 60*b0d17251Schristos 61*b0d17251Schristos=item B<-nocrl> 62*b0d17251Schristos 63*b0d17251SchristosNormally a CRL is included in the output file. With this option no CRL is 64*b0d17251Schristosincluded in the output file and a CRL is not read from the input file. 65*b0d17251Schristos 66*b0d17251Schristos{- $OpenSSL::safe::opt_provider_item -} 67*b0d17251Schristos 68*b0d17251Schristos=back 69*b0d17251Schristos 70*b0d17251Schristos=head1 EXAMPLES 71*b0d17251Schristos 72*b0d17251SchristosCreate a PKCS#7 structure from a certificate and CRL: 73*b0d17251Schristos 74*b0d17251Schristos openssl crl2pkcs7 -in crl.pem -certfile cert.pem -out p7.pem 75*b0d17251Schristos 76*b0d17251SchristosCreates a PKCS#7 structure in DER format with no CRL from several 77*b0d17251Schristosdifferent certificates: 78*b0d17251Schristos 79*b0d17251Schristos openssl crl2pkcs7 -nocrl -certfile newcert.pem 80*b0d17251Schristos -certfile demoCA/cacert.pem -outform DER -out p7.der 81*b0d17251Schristos 82*b0d17251Schristos=head1 NOTES 83*b0d17251Schristos 84*b0d17251SchristosThe output file is a PKCS#7 signed data structure containing no signers and 85*b0d17251Schristosjust certificates and an optional CRL. 86*b0d17251Schristos 87*b0d17251SchristosThis command can be used to send certificates and CAs to Netscape as part of 88*b0d17251Schristosthe certificate enrollment process. This involves sending the DER encoded output 89*b0d17251Schristosas MIME type application/x-x509-user-cert. 90*b0d17251Schristos 91*b0d17251SchristosThe B<PEM> encoded form with the header and footer lines removed can be used to 92*b0d17251Schristosinstall user certificates and CAs in MSIE using the Xenroll control. 93*b0d17251Schristos 94*b0d17251Schristos=head1 SEE ALSO 95*b0d17251Schristos 96*b0d17251SchristosL<openssl(1)>, 97*b0d17251SchristosL<openssl-pkcs7(1)> 98*b0d17251Schristos 99*b0d17251Schristos=head1 COPYRIGHT 100*b0d17251Schristos 101*b0d17251SchristosCopyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved. 102*b0d17251Schristos 103*b0d17251SchristosLicensed under the Apache License 2.0 (the "License"). You may not use 104*b0d17251Schristosthis file except in compliance with the License. You can obtain a copy 105*b0d17251Schristosin the file LICENSE in the source distribution or at 106*b0d17251SchristosL<https://www.openssl.org/source/license.html>. 107*b0d17251Schristos 108*b0d17251Schristos=cut 109