=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/openssl.1,v retrieving revision 1.103 retrieving revision 1.104 diff -u -r1.103 -r1.104 --- src/usr.bin/openssl/openssl.1 2019/07/04 13:00:42 1.103 +++ src/usr.bin/openssl/openssl.1 2019/07/04 13:55:20 1.104 @@ -1,4 +1,4 @@ -.\" $OpenBSD: openssl.1,v 1.103 2019/07/04 13:00:42 inoguchi Exp $ +.\" $OpenBSD: openssl.1,v 1.104 2019/07/04 13:55:20 inoguchi Exp $ .\" ==================================================================== .\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. .\" @@ -878,17 +878,21 @@ .Nm "openssl crl" .Op Fl CAfile Ar file .Op Fl CApath Ar dir +.Op Fl crlnumber .Op Fl fingerprint .Op Fl hash +.Op Fl hash_old .Op Fl in Ar file .Op Fl inform Cm der | pem .Op Fl issuer .Op Fl lastupdate +.Op Fl nameopt Ar option .Op Fl nextupdate .Op Fl noout .Op Fl out Ar file .Op Fl outform Cm der | pem .Op Fl text +.Op Fl verify .nr nS 0 .Pp The @@ -907,11 +911,15 @@ i.e. a hash of each subject name (using .Cm x509 Fl hash ) should be linked to each certificate. +.It Fl crlnumber +Print the CRL number. .It Fl fingerprint Print the CRL fingerprint. .It Fl hash Output a hash of the issuer name. This can be used to look up CRLs in a directory by issuer name. +.It Fl hash_old +Output an old-style (MD5) hash of the issuer name. .It Fl in Ar file The input file to read from, or standard input if not specified. .It Fl inform Cm der | pem @@ -922,6 +930,8 @@ Output the .Cm lastUpdate field. +.It Fl nameopt Ar option +Specify certificate name options. .It Fl nextupdate Output the .Cm nextUpdate @@ -934,6 +944,8 @@ The output format. .It Fl text Print the CRL in plain text. +.It Fl verify +Verify the signature on the CRL. .El .Sh CRL2PKCS7 .nr nS 1