ezgh private-ca certificate revoke <id> --reason r [flags]Revoke a certificate: its CA’s CRL lists it within 5 minutes and OCSP answers “revoked” within a minute, so clients that check reject it. --reason is unspecified, keyCompromise (which also destroys a key EZGH generated), affiliationChanged, superseded or cessationOfOperation. Revocation is final. It asks first on a terminal; --yes confirms otherwise.
Part of ezgh private-ca certificate.
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--reason |
string | unspecified |
why: unspecified, keyCompromise, affiliationChanged, superseded, cessationOfOperation |
-y, --yes |
boolean | don’t ask for confirmation |
This command also takes the global flags.