.png){kind=logo}
validatecertificate
Request a certificate to be validated by the specified service.
usage: Usage: signclient validatecertificate <options>
-cert <cert-file> Path to certificate file (DER or PEM)
(Required).
-certpurposes <certpurposes> A ',' separated string containing
requested certificate purposes.
-der Certificate is in DER format.
-help Display this info
-hosts <hosts> A ',' separated string containing the
hostnames of the validation service nodes.
Ex 'host1.someorg.org,host2.someorg.org'.
When using the HTTP protocol, only one
host name can be specified. (Required).
-pem Certificate is in PEM format (Default).
-port <port> Remote port of service (Default is 8080 or
8442 for SSL).
-protocol <protocol> Protocol to use, either WEBSERVICES or
HTTP. Default: WEBSERVICES.
-service <service-name> The name or ID of the validation service
to process request. (Required)
-silent Don't produce any output, only return
value.
-truststore <jks-file> Path to JKS truststore containing trusted
CA for SSL Server certificates.
-truststorepwd <password> Password to unlock the truststore.
The following values is returned by the program that can be used when scripting.
-2 : Error happened during execution
-1 : Bad arguments
0 : Certificate is valid
1 : Certificate is revoked
2 : Certificate is not yet valid
3 : Certificate have expired
4 : Certificate doesn't verify
5 : CA Certificate have been revoked
6 : CA Certificate is not yet valid
7 : CA Certificate have expired
8 : Certificate have no valid certificate purpose
Sample usages:
a) validatecertificate -service CertValidationWorker -hosts localhost -cert
certificate.pem
b) validatecertificate -service 5806 -hosts localhost -cert certificate.pem
-truststore p12/truststore.jks -truststorepwd changeit
c) validatecertificate -service CertValidationWorker -hosts localhost
-cert certificate.pem -protocol HTTP