---
name: "ipsec-crlutil"
section: "8"
platform: "linux"
package: "libreswan"
version: "5.2-2.2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/ipsec-crlutil"
---

# ipsec-crlutil(8)

Helper to run NSS crlutil on IPsec NSS database

## NAME

ipsec-crlutil - Helper to run NSS crlutil on IPsec NSS database

## SYNOPSIS

**ipsec crlutil**

## DESCRIPTION

**ipsec crlutil** is a helper that runs NSS's **crlutil** command against Libreswan's NSS database by adding the option **-d /var/lib/ipsec/nss** to the parameter list. **crlutil** is a helper to run NSS crlutil on IPsec NSS database with **-d /var/lib/ipsec/nss** option.

See [**crlutil**(1)](/crlutil/1.md) for additional information.

## SEE ALSO

[**crlutil**(1)](/crlutil/1.md), [**ipsec.conf**(5)](/ipsec.conf/5.md), [**ipsec**(8)](/ipsec/8.md), [**ipsec-add**(8)](/ipsec-add/8.md), [**ipsec-algparse**(8)](/ipsec-algparse/8.md), [**ipsec-briefconnectionstatus**(8)](/ipsec-briefconnectionstatus/8.md), [**ipsec-briefstatus**(8)](/ipsec-briefstatus/8.md), [**ipsec-certutil**(8)](/ipsec-certutil/8.md), [**ipsec-checkconfig**(8)](/ipsec-checkconfig/8.md), [**ipsec-checknflog**(8)](/ipsec-checknflog/8.md), [**ipsec-checknss**(8)](/ipsec-checknss/8.md), [**ipsec-connectionstatus**(8)](/ipsec-connectionstatus/8.md), [**ipsec-delete**(8)](/ipsec-delete/8.md), [**ipsec-down**(8)](/ipsec-down/8.md), [**ipsec-ecdsasigkey**(8)](/ipsec-ecdsasigkey/8.md), [**ipsec-fetchcrls**(8)](/ipsec-fetchcrls/8.md), [**ipsec-fipsstatus**(8)](/ipsec-fipsstatus/8.md), [**ipsec-globalstatus**(8)](/ipsec-globalstatus/8.md), [**ipsec-import**(8)](/ipsec-import/8.md), [**ipsec-initnss**(8)](/ipsec-initnss/8.md), [**ipsec-letsencrypt**(8)](/ipsec-letsencrypt/8.md), [**ipsec-listall**(8)](/ipsec-listall/8.md), [**ipsec-listcacerts**(8)](/ipsec-listcacerts/8.md), [**ipsec-listcerts**(8)](/ipsec-listcerts/8.md), [**ipsec-listcrls**(8)](/ipsec-listcrls/8.md), [**ipsec-listen**(8)](/ipsec-listen/8.md), [**ipsec-listpubkeys**(8)](/ipsec-listpubkeys/8.md), [**ipsec-modutil**(8)](/ipsec-modutil/8.md), [**ipsec-newhostkey**(8)](/ipsec-newhostkey/8.md), [**ipsec-ondemand**(8)](/ipsec-ondemand/8.md), [**ipsec-pk12util**(8)](/ipsec-pk12util/8.md), [**ipsec-pluto**(8)](/ipsec-pluto/8.md), [**ipsec-purgeocsp**(8)](/ipsec-purgeocsp/8.md), [**ipsec-redirect**(8)](/ipsec-redirect/8.md), [**ipsec-replace**(8)](/ipsec-replace/8.md), [**ipsec-rereadall**(8)](/ipsec-rereadall/8.md), [**ipsec-rereadcerts**(8)](/ipsec-rereadcerts/8.md), [**ipsec-rereadsecrets**(8)](/ipsec-rereadsecrets/8.md), [**ipsec-restart**(8)](/ipsec-restart/8.md), [**ipsec-route**(8)](/ipsec-route/8.md), [**ipsec-rsasigkey**(8)](/ipsec-rsasigkey/8.md), [**ipsec-setup**(8)](/ipsec-setup/8.md), [**ipsec-showhostkey**(8)](/ipsec-showhostkey/8.md), [**ipsec-showroute**(8)](/ipsec-showroute/8.md), [**ipsec-showstates**(8)](/ipsec-showstates/8.md), [**ipsec-shuntstatus**(8)](/ipsec-shuntstatus/8.md), [**ipsec-start**(8)](/ipsec-start/8.md), [**ipsec-status**(8)](/ipsec-status/8.md), [**ipsec-stop**(8)](/ipsec-stop/8.md), [**ipsec-trafficstatus**(8)](/ipsec-trafficstatus/8.md), [**ipsec-unroute**(8)](/ipsec-unroute/8.md), [**ipsec-up**(8)](/ipsec-up/8.md), [**ipsec-vfychain**(8)](/ipsec-vfychain/8.md), [**ipsec-whack**(8)](/ipsec-whack/8.md)

## BUGS

none

## AUTHOR

Tuomo Soini