swanctl --flush-certs

Synopsis

swanctl --flush-certs [--type x509|x509_ac|x509_crl|ocsp_response|pubkey]

swanctl --stats --help

Description

This swanctl subcommand flushes either all certificates or only those of a given type.

Options

--type     (-t)  filter by certificate type

--raw      (-r)  dump raw response message
--pretty   (-P)  dump raw response message in pretty print
--debug    (-v)  set debug level, default: 1
--options  (-+)  read command line options from file
--uri      (-u)  service URI to connect to
--help     (-h)  show usage information

Examples

Flush all Certificate Revocation Lists

$ swanctl --flush-certs --type x509_crl