Skip to content

ezgh private-ca ca delete

Schedule a certificate authority's deletion.

Updated View as Markdown
ezgh private-ca ca delete <ca> [--window days] [flags]

Delete a certificate authority: it stops signing now, and after --window days (7–30, default 30) its key is destroyed for good. Until then ezgh private-ca ca restore brings it back. Its CRLs and OCSP keep being served until its certificate expires. A CA with active subordinates, or managed certificates that renew from it, can’t be deleted until they’re gone. It asks first on a terminal; --yes confirms otherwise.

Part of ezgh private-ca ca.

Flags

Flag Type Default Description
--window int 30 days until its key is destroyed, 7–30
-y, --yes boolean don’t ask for confirmation

This command also takes the global flags.

Navigation

Type to search…

↑↓ navigate↵ selectEsc close