| ndnsec-cert-revoke |
| ================== |
| |
| ``ndnsec-cert-revoke`` is a tool to generate a certificate revocation data. |
| |
| Usage |
| ----- |
| |
| :: |
| |
| $ ndnsec-cert-revoke [-h] request |
| |
| Description |
| ----------- |
| |
| This command takes an identity ertificate as input. |
| The tool will check whether user is the issuer of the certificate (by checking whether user has the key pointed by the KeyLocator of the certificate). |
| If so, the tool will generate an empty packet named by the certificate name appended with "REVOKED" as a revocation data. |
| If user is not the issuer of the certificate, the command will return error. |
| |
| This tool generates a revocation Data. |
| It does not actually revoke a certificate. |
| How to publish and use the revocation Data is not finalized yet. |
| |
| Options |
| ------- |
| |
| ``request`` |
| request is file name of the certificate to revoke (``-`` for standard input) |
| |
| Examples |
| -------- |
| |
| :: |
| |
| $ ndnsec-cert-revoke some-cert-to-revoke.ndncert |