Display PKI CRL from API using openssl

Vault
1

Hi,

I want to view the PKI CRL list retrieved from Vault API using openssl as follows:

curl --insecure $VAULT_ADDR/v1/pki_int/cert/crl | jq ‘.data.certificate’ > pki_int.crl

openssl crl -text -noout -in pki_int.crl

However, I get an error from openssl which I think is due to the “\n” characters in the text.

Has anyone come accross this before?

Thanks,

Andrew

2

For this purpose you’re better off using the raw CRL endpoint.

1 Like
3

Thanks Jeff - I will give it a try…