pki: Allow to load CRLs from files in --verify

[strongswan.git] / src / pki / man / pki---verify.1.in

diff --git a/src/pki/man/pki---verify.1.in b/src/pki/man/pki---verify.1.in
index dd0c0e9..74adaf1 100644 (file)
--- a/src/pki/man/pki---verify.1.in
+++ b/src/pki/man/pki---verify.1.in
@@ -1,4 +1,4 @@
-.TH "PKI \-\-VERIFY" 1 "2013-07-31" "@PACKAGE_VERSION@" "strongSwan"
+.TH "PKI \-\-VERIFY" 1 "2016-08-19" "@PACKAGE_VERSION@" "strongSwan"

 .
 .SH "NAME"
 .
 .
 .SH "NAME"
 .


@@ -9,6 +9,7 @@ pki \-\-verify \- Verify a certificate using a CA certificate
 .SY pki\ \-\-verify
 .OP \-\-in file
 .OP \-\-cacert file
 .SY pki\ \-\-verify
 .OP \-\-in file
 .OP \-\-cacert file

+.OP \-\-crl file

 .OP \-\-debug level
 .OP \-\-online
 .YS
 .OP \-\-debug level
 .OP \-\-online
 .YS


@@ -48,6 +49,9 @@ X.509 certificate to verify. If not given it is read from \fISTDIN\fR.
 CA certificate to use for trustchain verification. If not given the certificate
 is assumed to be self\-signed.
 .TP
 CA certificate to use for trustchain verification. If not given the certificate
 is assumed to be self\-signed.
 .TP

+.BI "\-l, \-\-crl " file
+Local CRL to use for trustchain verification. Implies \fB-o\fR.
+.TP

 .BI "\-o, \-\-online
 Enable online CRL/OCSP revocation checking.
 .
 .BI "\-o, \-\-online
 Enable online CRL/OCSP revocation checking.
 .