Release 10.1A: OpenEdge Getting Started:
Installation and Configuration

certutil

Provides all the functions necessary to install and manage root certificates from any Certification Authority (CA) as entries in the root certificate store of an OpenEdge client machine (located in OpenEdge-Install-Dir\certs).

Operating system	Syntax
UNIX Windows	certutil [ -brief | -verbose ]   {   [ -format { DER | PEM } ] -display cert-file     | [ -format { DER | PEM } ] -import cert-file     | -list [ alias ... ]     | -remove alias ...   }

-brief

Provides less information or as specified for the function.

-verbose

Provides more information or as specified for the function.

-format { DER | PEM }

Specifies the certificate format for the -import and -display functions. The default input format for a certificate is Privacy Enhanced Mail (PEM). Because some CAs issue root digital certificates in a binary format (DER), you must specify -format DER to import these certificates.

-display cert-file

Displays the digital certificate file information contained in the operating system disk file, cert-file. You must specify cert-file as a fully qualified operating system file path name. The -verbose option displays complete certificate information, and the -brief option displays less certificate information for each certificate store entry.

-import cert-file

Imports a trusted CA digital certificate from the disk file, cert-file. The cert-file argument must specify a fully qualified operating system file pathname. The function creates a root certificate store entry with a generated alias name and displays that alias name for view (specified by alias for other functions of this command).

Note: All root digital certificate store entry alias names are exactly 8 hexadecimal characters in length and have a .0 (dot-zero) file extension. All other files in the root certificate store are ignored.

-list [ alias ... ]

Displays a list of certificate store entries identified by each alias name (alias). You can specify multiple aliases, but you cannot use wild cards. If you specify no alias, certutil displays all entries in the certificate store. The -verbose option displays complete certificate information and the -brief option displays less certificate information per key store entry.

-remove alias ...

Removes one or more certificate store entries that you specify by their alias. You cannot use wild cards. Moves each specified certificate store entry into the backup subdirectory and overwrites any previous backup subdirectory entry with the same alias name.

For more information on managing root certificates in the OpenEdge root certificate store, see Chapter 9, " Managing OpenEdge Key and Certificate Stores."