Skip to content

Glossary: Cryptography and PKI

openssl ca

Also written: -gencrl, -revoke

The openssl subcommand that runs a small CA. It signs CSRs into certificates, revokes them (-revoke) and publishes CRLs (-gencrl), recording everything in index.txt.

Where the book teaches it

Related terms

CRL (Certificate Revocation List)