cfssl

cfssl copied to clipboard

Every time you run cfssl -help or just cfssl the list of available commands is in random order. This fact, combined with lack of man page and wiki page outlining CLI usage, makes learning and daily usage harder.

My env:

$ cfssl version 
Version: 1.6.3
Runtime: go1.19.2
$ uname -mprsv
Darwin 22.3.0 Darwin Kernel Version 22.3.0: Thu Jan  5 20:48:54 PST 2023; root:xnu-8792.81.2~2/RELEASE_ARM64_T6000 arm64 arm
$

Proof:

$ cfssl
No command is given.
Usage:
Available commands:
	ocspserve
	scan
	serve
	version
	gencert
	gencrl
	ocspdump
	ocsprefresh
	print-defaults
	genkey
	ocspsign
	revoke
	bundle
	certinfo
	sign
	selfsign
	crl
	gencsr
	info
Top-level flags:
  -alsologtostderr
    	log to standard error as well as files
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory
  -logtostderr
    	log to standard error instead of files
  -stderrthreshold value
    	logs at or above this threshold go to stderr
  -v value
    	log level for V logs
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
cfssl
No command is given.
Usage:
Available commands:
	print-defaults
	certinfo
	sign
	genkey
	gencert
	ocspsign
	info
	bundle
	crl
	ocsprefresh
	ocspserve
	version
	gencrl
	selfsign
	scan
	serve
	gencsr
	ocspdump
	revoke
Top-level flags:
  -alsologtostderr
    	log to standard error as well as files
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory
  -logtostderr
    	log to standard error instead of files
  -stderrthreshold value
    	logs at or above this threshold go to stderr
  -v value
    	log level for V logs
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
$ cfssl
No command is given.
Usage:
Available commands:
	genkey
	gencrl
	ocsprefresh
	ocspsign
	selfsign
	certinfo
	crl
	serve
	version
	ocspserve
	revoke
	bundle
	gencert
	gencsr
	scan
	sign
	ocspdump
	info
	print-defaults
Top-level flags:
  -alsologtostderr
    	log to standard error as well as files
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory
  -logtostderr
    	log to standard error instead of files
  -stderrthreshold value
    	logs at or above this threshold go to stderr
  -v value
    	log level for V logs
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
$ 
$ while true; do cfssl 2>&1 | sha256sum; done
cf2a25235f9d01b301ce3ce1934d5d83e399df07ec0d511b6f28785bcb3e0b50  -
904390c11bcc75883f6a0612f6e5530dd1b1df4651c005554c8d35a93a948d2c  -
c62118e22690d9176786f30b92614f2264bb697ebbd5edfe09264fba00d4909b  -
cb967749d051394cd1e79ae996b3d84560b046d47e384c1f632fa9982afecf21  -
ac038bfac669b1ced0b58733455bf66a269886c7c34438a07aab8509e6ea4d72  -
7fc0180bf5d9bb8aca23842a97f6c749df8e6a6690ba22931810b291e8bdbced  -
cf5980ec1bb110e889343903255dfcc7957ec40b3935686c72e62abdcc2a3b32  -
0f8d76d90ab321e3005c73437770e0cd1cdd9dae8c3202a4ee9c5bea035660d8  -
90ae9d4ea73d9a1de39e0ae14af6dc8218afc5db8fdade03bb8f8c8a15a15040  -
7ecce90b9c619ab106a2d3315e434a4853c38dcf61a4dd2b82f12b8d4acd768c  -
7b3d1ac3d99c4d24f17f65e877c4486f807a77a26ef2deb1b2f3251cd9ab86c7  -
506752815b32ad2a7380aec5ff2b71fabdb7ed1999c2a2615665875424ed40ab  -
1edb0da0c2331dad7a3319018a1bb15a4f183fb1917904e92ee6690cdda555d2  -
707a9b90dd257d0650448767f514bd32deeabc8c336b65adc43176e1135e26c0  -
6bf74554c9926dc95c8c70c2811a346421a7fd425b6e933c162adf583501fd5e  -
c071cea2604562a1bdca7cd1319a03f915929a05ed8120ca1942b217c699c930  -
c8cd7e5b177475e8e830e33e294eefdb49c7a0d781b0539547619f99c9c59f12  -
20129496ee079f9754c63a478068f1325d6c4c071c7339d90b1b116463b6d300  -
7acb41a6b10713fc60a642f4af03cb30fc864b19daf81abd7a4de892cd0b184f  -
b59b6988449f43f12d1cd35d3926948b11618e88cc31117d2fa0bda03617d4f3  -
...