diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index 1a721a03..432167dc 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -39,9 +39,10 @@ A list of commands is shown below: build-server-full [ cmd-opts ] build-serverClient-full [ cmd-opts ] inline - renew - revoke [ cmd-opts ] expire + renew + revoke [ cmd-opts ] #(DEPRECATED) + revoke-issued [ cmd-opts ] #(REPLACEMENT) revoke-expired [ cmd-opts ] revoke-renewed [ cmd-opts ] gen-crl @@ -212,25 +213,43 @@ Usage: easyrsa [ OPTIONS.. ] [ cmd-opts.. ]" revoke*) text=" * revoke [ reason ] -* revoke-expired [ reason ] -* revoke-renewed [ reason ] + +Commmand 'revoke' is DEPRECATED and can ONLY be used in batch mode. +Commmand 'revoke-issued' REPLACES command 'revoke'. Revoke a certificate specified by the , with an optional revocation [ reason ]. - Commands 'revoke-expired' and 'revoke-renewed' are functionally - equivalent to 'revoke', however, they are used to revoke certificates - which have been either 'expired' or 'renewed' by EasyRSA commands." - opts=" - * [ reason ]${NL} - Values accepted for option [ reason ]:${NL} + Values accepted for option [ reason ]: us | uns* | unspecified kc | key* | keyCompromise cc | ca* | CACompromise ac | aff* | affiliationChanged ss | sup* | superseded co | ces* | cessationOfOperation - ch | cer* | certificateHold" + ch | cer* | certificateHold + + Commands 'revoke-expired' and 'revoke-renewed' are functionally + equivalent to 'revoke-issued', however, they are used to revoke + certificates which have been either 'expired' or 'renewed' by + other EasyRSA commands. + +Commmand 'revoke' is DEPRECATED and can ONLY be used in batch mode. +Commmand 'revoke-issued' REPLACES command 'revoke'. + +REQUIRED COMMANDS: + +* 'revoke-issued' [ reason ] + Revoke a current, issued certificate. + +* 'revoke-expired' [ reason ] + Revoke an old, expired certificate. + +* 'revoke-renewed' [ reason ] + Revoke an old, renewed certificate." + opts=" + * [ reason ]${NL} + Values accepted for option [ reason ]: Details above." ;; expire) text="