NAME

       clean-crl - remove orphaned CRL like files from a certificate directory

SYNOPSIS

       clean-crl [-l crlpath] [-v] [-V] [-n] [-h]

DESCRIPTION

       The  clean-crl  utility  will  remove  CRL  like  files  named  hash.rn from the directory
       specified with the -l option if there is no corresponding .n file in the same.  In effect,
       if  the  directory is solely used to hold CA certificates in the common OpenSSL format, it
       will thus remove CRL files for which the corresponding CA does  not or no longer exists in
       the directory.

OPTIONS

       -h --help
              Show help text.

       -l --cadir metadata-directory
              The  script  will search this directory for files with the suffix .ri.  There is no
              default  -  a  common  choice  is  /etc/pki/tls/certs,  /etc/openldap/cacerts,   or
              /etc/grid-security/certificates.

       -V --version
              Display version number (same as corresponding fetch-crl)

       -v --verbose
              Verbose mode

       -n --dryrun
              Do not actually remove any files (useful primarily with -v)

CONFIGURATION

       None.

NOTES

       This  tool  does  not check the contents of the files removed, and will blindly unlink any
       file which even remotely looks like an OpenSSL CRL file. Use with extreme caution.

SEE ALSO

       fetch-crl(8), openssl(1), http://wiki.nikhef.nl/grid/FetchCRL3

DIAGNOSTICS

       Exit status is normally 0; if an error occurs, exit status is 1 and  diagnostics  will  be
       written to standard error.

LICENSE

       Licensed under the Apache License, Version 2.0 (the "License");

       http://www.apache.org/licenses/LICENSE-2.0

BUGS

       Does not check the contents of the files removed.