GetCRL Service - dogtagpki/pki GitHub Wiki
This service can be used to display the latest CRL in CA.
-
Operation:
GET /ca/ee/ca/getCRL
-
Authentication: None
-
Parameters:
-
op
: Operation-
displayCRL
-
getCRL
-
getDeltaCRL
-
importCRL
-
importDeltaCRL
-
checkCRL
-
checkCRLcache
-
-
crlIssuingPoint
: CRL issuing point
-
$ curl -s "http://localhost:8080/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL" | openssl crl -inform DER -text Certificate Revocation List (CRL): Version 2 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: O = EXAMPLE, OU = pki-tomcat, CN = CA Signing Certificate Last Update: Oct 16 14:00:00 2023 GMT Next Update: Oct 16 18:00:00 2023 GMT CRL extensions: X509v3 Authority Key Identifier: 6E:9A:05:62:E9:98:23:E4:09:8C:91:9D:8A:83:2B:A7:6B:78:50:CC X509v3 CRL Number: 16 No Revoked Certificates. Signature Algorithm: sha256WithRSAEncryption Signature Value: c3:21:b2:34:6c:bf:35:39:eb:a6:41:1f:42:5d:86:5d:0d:ef: 08:14:de:e4:b2:95:74:bc:50:53:bd:91:62:45:b7:c7:7b:eb: 10:22:eb:a2:e9:44:32:17:d5:08:7c:fa:3e:72:69:c7:a6:03: 4c:45:cf:9f:64:0f:57:ad:62:1d:1f:72:d7:5b:7b:1d:80:da: 09:f7:fd:50:a4:af:20:37:53:00:ca:55:6c:07:af:8e:09:39: 8e:eb:51:1e:33:62:3c:5e:c6:f1:3c:6f:aa:df:93:4a:ae:7e: 8c:17:ac:b5:d8:a6:f0:fc:e0:75:67:31:aa:02:01:d0:b5:6d: 68:f0:ac:b8:a4:b0:d5:e8:0c:d5:6b:16:b2:6d:9f:d4:f4:13: af:b8:3b:45:f9:04:78:50:07:d2:f2:b5:f1:f1:49:85:cf:c7: 4f:2d:37:f0:8c:4c:ff:20:5d:24:ae:57:cc:9b:a3:80:1d:3e: 5c:86:d5:13:7e:34:e7:48:93:42:42:9f:04:bc:0b:4c:0b:9b: b1:79:62:61:9e:95:60:85:07:78:17:19:b3:80:b1:3b:02:12: 1a:f9:43:ac:06:6b:25:91:ef:53:13:1a:7d:2e:74:b9:55:e8: 39:63:9d:46:59:1a:db:34:b0:e9:97:b9:8b:1b:b1:ea:ca:9e: 05:57:26:6d:f8:41:fc:01:98:a6:56:0a:a1:63:9e:04:fa:a9: 71:a4:b7:85:e4:63:92:2d:f3:82:c7:38:e4:3c:69:15:d0:06: 32:58:2c:93:39:e9:77:f0:71:d8:f5:2e:90:89:c6:bd:33:9c: d8:a5:b1:9d:c8:fd:30:92:e5:f7:fa:10:69:06:06:5d:6f:aa: 10:96:e5:d5:35:b5:84:94:c1:34:59:73:e6:4f:aa:94:bf:94: cb:fc:5b:dd:83:7f:5d:8e:7a:ac:ef:80:e8:17:82:0b:ac:80: 6f:b5:31:67:f5:04:1f:26:8a:e8:96:c4:2f:e3:c0:01:d2:d2: d7:a1:73:8e:51:0d -----BEGIN X509 CRL----- MIICQjCBqwIBATANBgkqhkiG9w0BAQsFADBIMRAwDgYDVQQKDAdFWEFNUExFMRMw EQYDVQQLDApwa2ktdG9tY2F0MR8wHQYDVQQDDBZDQSBTaWduaW5nIENlcnRpZmlj YXRlFw0yMzEwMTYxNDAwMDBaFw0yMzEwMTYxODAwMDBaoC8wLTAfBgNVHSMEGDAW gBRumgVi6Zgj5AmMkZ2Kgyuna3hQzDAKBgNVHRQEAwIBEDANBgkqhkiG9w0BAQsF AAOCAYEAwyGyNGy/NTnrpkEfQl2GXQ3vCBTe5LKVdLxQU72RYkW3x3vrECLroulE MhfVCHz6PnJpx6YDTEXPn2QPV61iHR9y11t7HYDaCff9UKSvIDdTAMpVbAevjgk5 jutRHjNiPF7G8Txvqt+TSq5+jBestdim8PzgdWcxqgIB0LVtaPCsuKSw1egM1WsW sm2f1PQTr7g7RfkEeFAH0vK18fFJhc/HTy038IxM/yBdJK5XzJujgB0+XIbVE340 50iTQkKfBLwLTAubsXliYZ6VYIUHeBcZs4CxOwISGvlDrAZrJZHvUxMafS50uVXo OWOdRlka2zSw6Ze5ixux6sqeBVcmbfhB/AGYplYKoWOeBPqpcaS3heRjki3zgsc4 5DxpFdAGMlgskznpd/Bx2PUukInGvTOc2KWxncj9MJLl9/oQaQYGXW+qEJbl1TW1 hJTBNFlz5k+qlL+Uy/xb3YN/XY56rO+A6BeCC6yAb7UxZ/UEHyaK6JbEL+PAAdLS 16FzjlEN -----END X509 CRL-----