Search

vcli certificates acme revoke

Revoke one or multiple certificates

Synopsis

Revoke ACME issued TLS certificate.

Example

vcli certificate acme revoke 1 --reason 0

Reason parameter

The ACME protocol requires that a reason for a revocation is transmitted.

The value for –reason matches the numeric codes defined in RFC 5280. Your CA might only accept a subset of these values:

  • 0 unspecified
  • 1 keyCompromise
  • 2 cACompromise
  • 3 affiliationChanged
  • 4 superseded
  • 5 cessationOfOperation
  • 6 certificateHold
  • value 7 is not used
  • 8 removeFromCRL
  • 9 privilegeWithdrawn
  • 10 aACompromise
vcli certificates acme revoke [Certificate-id,... | -f] [flags]

Options

  -f, --filter stringToString   Filter based on attributes, '*' act as wildcard (default [])
  -h, --help                    help for revoke
      --reason int              Reason code for revoking

Options inherited from parent commands

  -c, --config string   configuration file for the CLI (default ~/.vcli.yml)
                        Could also be set via VARNISH_CONTROLLER_CLI_CONFIG=/path/to/config.yml
      --csv             Output the response table as CSV format.
  -j, --json            Output the response table as JSON format.

SEE ALSO


®Varnish Software, Wallingatan 12, 111 60 Stockholm, Organization nr. 556805-6203