CLEAN-CRL(8)

💖 CLEAN-CRL 💖 (section 8, System Manager's Manual, bestie)

okay so hi, welcome to clean-crl, the little utility that goes through your cert directory and yeets the CRL files that nobody needs anymore 🧹✨

---

🌸 NAME 🌸

clean-crl — remove orphaned CRL like files from a certificate directory

---

✨ SYNOPSIS ✨

clean-crl [-l crlpath] [-v] [-V] [-n] [-h]

---

🦋 DESCRIPTION 🦋

so here's the tea ☕ — the clean-crl utility will remove CRL like files named hash.rn from the directory you specify with the -l option, but only if there's no corresponding .n file chillin' in that same directory. orphan behavior, honestly 💀

and like, what that means in practice: if the directory is solely used to hold CA certificates in the common OpenSSL format, then it'll remove the CRL files for which the corresponding CA does not — or no longer — exist in the directory. gone. not invited to the group chat anymore 🫶

---

💅 OPTIONS 💅

• -h, --help — show help text. that's it, that's the whole thing 🎀
• -l, --cadir metadata-directory — the script will search this directory for files with the suffix .ri. there is no default, bestie — you must pick one. a common choice is /etc/pki/tls/certs, /etc/openldap/cacerts, or /etc/grid-security/certificates 👑
• -V, --version — display version number (same as corresponding fetch-crl) ⭐
• -v, --verbose — verbose mode, aka it tells you everything it's doing 📢
• -n, --dryrun — do not actually remove any files (useful primarily with -v). a little test run before the real thing, we love a rehearsal 🙈

---

🌈 CONFIGURATION 🌈

none. zero. nothing to configure. iconic minimalism, no notes 💜

---

⚠️ NOTES ⚠️

this tool does not check the contents of the files removed, and will blindly unlink any file which even remotely looks like an OpenSSL CRL file. use with extreme caution. like, extreme extreme. it's giving reckless, fr fr 😭

---

🔥 SEE ALSO 🔥

fetch-crl(8), openssl(1), http://wiki.nikhef.nl/grid/FetchCRL3

---

🩺 DIAGNOSTICS 🩺

exit status is normally 0; if an error occurs, exit status is 1 and diagnostics will be written to standard error. so if it's throwing a 1 at you, go read that stderr, bestie 💖

---

📜 LICENSE 📜

licensed under the Apache License, Version 2.0 (the "License");

http://www.apache.org/licenses/LICENSE-2.0

---

🐛 BUGS 🐛

does not check the contents of the files removed. yes we're saying it again. it's a whole thing 😅

---

and that's the whole page, angel 🫶 this one came from the Trust Anchor Utilities, a local situation, and it's the CLEAN-CRL(8) era, no cap. stay safe out there and double-check before you let it delete anything 💖✨