Syntax of the CLI command cert
Last adaption: 06.2023
New:
- Description updated
- Layout adjustments
This article refers to a Resellerpreview
| Command | Description | Example | As of version |
|---|---|---|---|
| cert unrevoke | Restore a revoked certificate | cert unrevoke id 207 |
11.6 |
| cert delete cert | Removes a certificate completely notempty Attention: A deleted certificate is subsequently also no longer on the list of revoked certificates and can thus be used again, for example, to establish a connection to a remote station! This command should notempty under no circumstances be used if a certificate has already been used productively! It is only an option to remove test certificates or certificates that were accidentally named incorrectly. |
cert delete cert id 207 |
11.8 |
| cert delete key | Removes the private key from a certificate | cert delete key id 207 |
11.6 |
| cert delete crl | Removes the imported CRL (Certificate Revocation List) from a certificate | cert delete crl id 207 |
11.6 |
| cert get | Listing of all certificates | cert get |
11.0 |
| cert new | Create a new certificate | Creates a CA certificate:cert new name "myCert" common_name "myCert" bits "2048" valid_since "2019-06-29-00-00-00" valid_till "2021-12-31-23-59-59" issuer_id "2" country "DE" state "NDS" location "LG" organization "SP" organization_unit "SP" email mail@test.local Creates a RW certificate: cert new name "MyRWCert" bits "2048" valid_since "2023-01-01-00-59-59" valid_till "2031-01-01-00-59-59" issuer "CA" country "DE" state "Niedersachsen" location "Lueneburg" organization "Securepoint GmbH" organization_unit "IT" email "support@securepoint.de" signature_algo "sha256WithRSAEncryption" issuer "SP_VPN_ROOT_CA" flags "KEY" issuer_id "2" |
11.0 |
| cert set | Editing an existing certificate | cert set id 215 email info@test.local |
11.0 |
| cert revoke | Revoking a certificate | cert revoke id 215 |
11.0 |
| cert export x509 | Export of a certificate (Public-Key) | cert export x509 id 215 |
11.0 |
| cert export privatekey | Export of a certificate(Private-Key) | cert export privatekey id 215 |
11.0 |
| cert export crl | Export of the CRL | cert export crl id 161 |
11.0 |
| cert export pkcs12 | Export of a certificate (PKCS12) | cert export pkcs12 id "215" password insecure |
11.0 |
| cert import | Import of a certificate | This function is currently not available directly through the CLI. | ≤11.4 |
| cert extension add | Adding extension values (e.g. for x509v3 certificates) | cert extension add id "151" ext_name "Netscape Cert Type" ext_value "SSL Server" |
11.0 |
| cert extension delete | Deletion of extensions | cert extension delete "1" |
12.0 |
| cert acme_account delete | Removes an acme-certificate | cert acme_account delete |
12.0 |
| cert acme_account get | Listing of all acme-certificates | cert acme_account get |
12.0 |
| cert acme_account new | Create a new acme-certificate | cert acme_account new |
12.0 |
| cert acme_account reset | Resetting an acme-certificate | cert acme_account reset acme_account_id 1 |
12.0 |
| cert acme_account set | Edit an existing acme-certificate | cert acme_account set flags <new flags> |
12.0 |
| cert acme_names get | Listing of all acme-certificate names | cert acme_names get |
12.0 |
| cert acme_names status | Displays the status of the alternate name | cert acme_names status acme_altname_list "myCert" acme_apikey_list "1234567-abcd-efgh-ijkl" acme_alias_list "myCert" |
12.0 |
| cert acme_names verify | Verification for the configuration of alternative names | cert acme_names verify acme_altname_list "myCert" acme_apikey_list "1234567-abcd-efgh-ijkl" acme_alias_list "myCert" |
12.0 |
| cert parse | cert parse ? |
12.0 |