ezgh private-ca ca revoke <ca> --reason r [flags]Revoke a subordinate certificate authority through its parent (which needs certificates.certificateAuthorities.revoke): its parent lists it on its CRL and OCSP, and it’s disabled for good, so clients that check reject every certificate under it. Roots aren’t revoked: disable or delete them. --reason is unspecified, keyCompromise, affiliationChanged, superseded or cessationOfOperation. Revocation is final. It asks first on a terminal; --yes confirms otherwise.
Part of ezgh private-ca ca.
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--reason |
string | unspecified |
why: unspecified, keyCompromise, affiliationChanged, superseded, cessationOfOperation |
-y, --yes |
boolean | don’t ask for confirmation |
This command also takes the global flags.