Orapki Crl Display - Oracle Database B10772-01 Administrator's Manual

orapki crl display

Purpose
Use this command to display specific CRLs that are stored in Oracle Internet
Directory.
Syntax
orapki crl display -crl <crl_location> [-wallet <wallet_location>]
[-summary|-complete]
with no authentication. See
page 7-42 for more information about this port.
The -user parameter specifies the username of the directory user who has
permission to delete CRLs from the CRL subtree in the directory.
The -wallet parameter (optional) specifies the location of the wallet that
contains the certificate of the certificate authority (CA) who issued the CRL.
Using it causes the tool to verify the validity of the CRL against the CA's
certificate prior to deleting it from the directory.
The -summary parameter is optional. Using it causes the tool to print the CRL
LDAP entry that was deleted.
The -crl parameter specifies the location of the CRL in the directory. It is
convenient to paste the CRL location from the list that displays when you use
the orapki crl list command. See
The -wallet parameter (optional) specifies the location of the wallet that
contains the certificate of the certificate authority (CA) who issued the CRL.
Using it causes the tool to verify the validity of the CRL against the CA's
certificate prior to displaying it.
Choosing either the -summary or the -complete parameters displays the
following information:
– -summary provides a listing that contains the CRL issuer's name and the
CRL's validity period
– -complete provides a list of all revoked certificates that the CRL contains.
Note that this option may take a long time to display, depending on the size
of the CRL.
"Uploading CRLs to Oracle Internet Directory"
"orapki crl list"
orapki Utility Commands Summary
on page E-10
orapki Utility E-9
on