passin and passout are not userd during "-revoke" They are used to give parameters to create the certificate and give it the above parameters. But, I think i managed to bypass the problem. I wrote a shell script using expect, after 30 minutes of fighting, script does what I want it to. It takes a users cert ID as a parameter and uses it to invoke 'openssl ca -revoke' command. Thanks to this, i can refer to it prom my php script. Maybe not the most elegant solution, but it works. And took me about 10 lines of code instead of 60 (non-working lines :) ) Thanks anyway all :) Cheers 2011/11/29 Peter <jazdatestowa@xxxxxxxxx> > passin and passout are not userd during "-revoke" > They are used to give parameters to create the certificate and give it > the above parameters. > > 2011/11/29 shiplu <shiplu.net@xxxxxxxxx> > >> Did you try -passin, -passout options of openssl command? >> >> See the man page here http://linux.die.net/man/1/openssl >> Specially the "Pass phrase arguments" section. >> >> -- >> Shiplu.Mokadd.im >> ImgSign.com | A dynamic signature machine >> >> Innovation distinguishes between follower and leader >> >> >