IPSEC-CRLUTIL(8)

💖 NAME 💖

okay so bestie, meet ipsec-crlutil — she's the helper that runs NSS's crlutil on the IPsec NSS database. that's it, that's the job, and she does it flawlessly 💅

---

🦋 SYNOPSIS 🦋

ipsec crlutil

like… that's the whole thing. no extra args needed, she knows where the database lives 🎀

---

✨ DESCRIPTION ✨

so here's the tea, fr fr: ipsec crlutil is a little helper wrapper that runs NSS's crlutil command against Libreswan's NSS database — and the way it does that is by quietly slipping the option -d /var/lib/ipsec/nss into the parameter list for you 🫶 no cap.

put it another way: crlutil is a helper to run NSS crlutil on the IPsec NSS database, with the -d /var/lib/ipsec/nss option doing the heavy lifting 🌸

and when you want the full lore, go read crlutil(1) for additional information — she's the main character, this one's just the bestie holding her bag 👑

---

🌈 SEE ALSO 🌈

the whole group chat showed up, and yes we're listing every single one because nobody gets left on read 💜:

• crlutil(1)
• ipsec.conf(5)
• ipsec(8)
• ipsec-add(8)
• ipsec-algparse(8)
• ipsec-briefconnectionstatus(8)
• ipsec-briefstatus(8)
• ipsec-certutil(8)
• ipsec-checkconfig(8)
• ipsec-checknflog(8)
• ipsec-checknss(8)
• ipsec-connectionstatus(8)
• ipsec-delete(8)
• ipsec-down(8)
• ipsec-ecdsasigkey(8)
• ipsec-fetchcrls(8)
• ipsec-fipsstatus(8)
• ipsec-globalstatus(8)
• ipsec-import(8)
• ipsec-initnss(8)
• ipsec-letsencrypt(8)
• ipsec-listall(8)
• ipsec-listcacerts(8)
• ipsec-listcerts(8)
• ipsec-listcrls(8)
• ipsec-listen(8)
• ipsec-listpubkeys(8)
• ipsec-modutil(8)
• ipsec-newhostkey(8)
• ipsec-ondemand(8)
• ipsec-pk12util(8)
• ipsec-pluto(8)
• ipsec-purgeocsp(8)
• ipsec-redirect(8)
• ipsec-replace(8)
• ipsec-rereadall(8)
• ipsec-rereadcerts(8)
• ipsec-rereadsecrets(8)
• ipsec-restart(8)
• ipsec-route(8)
• ipsec-rsasigkey(8)
• ipsec-setup(8)
• ipsec-showhostkey(8)
• ipsec-showroute(8)
• ipsec-showstates(8)
• ipsec-shuntstatus(8)
• ipsec-start(8)
• ipsec-status(8)
• ipsec-stop(8)
• ipsec-trafficstatus(8)
• ipsec-unroute(8)
• ipsec-up(8)
• ipsec-vfychain(8)
• ipsec-whack(8)

---

💀 BUGS 💀

none. not a single one. she's unproblematic, she's thriving, we love that for her 🙈✨

---

👑 AUTHOR 👑

Andrew Cagney, Tuomo Soini — absolute legends, respect on their names 🫡💖

---

okay and for the lil sign-off moment: this whole masterpiece is from Libreswan 5.4.1, dated 10/23/2026 🎀 that's the version tag and the date, and yes, IPSEC-CRLUTIL(8) ate and left no crumbs. periodt 💅🌸