OS Manuals

/usr/bin/trillian-ctserver

From certificate-transparency-trillian-ctserver 1.4.0-r4 (enterprise-packages), captured 2026-11-08 by running trillian-ctserver --help (exit 0). permalink

Usage of /usr/bin/trillian-ctserver:
  -add_dir_header
    	If true, adds the file directory to the header of the log messages
  -align_getentries
    	Enable get-entries request alignment (default true)
  -alsologtostderr
    	log to standard error as well as files (no effect when -logtostderr=true)
  -alsologtostderrthreshold value
    	logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)
  -cache_size int
    	Size parameter set to 0 makes cache of unlimited size (default -1)
  -cache_ttl duration
    	Providing 0 TTL turns expiring off (default -1s)
  -cache_type string
    	Supported cache type: noop, lru (Default: noop) (default "noop")
  -etcd_http_service string
    	Service name to announce our HTTP endpoint under (default "trillian-ctfe-http")
  -etcd_metrics_service string
    	Service name to announce our HTTP metrics endpoint under (default "trillian-ctfe-metrics-http")
  -etcd_servers string
    	A comma-separated list of etcd servers
  -get_sth_interval duration
    	Interval between internal get-sth operations (0 to disable) (default 3m0s)
  -getentries_metrics
    	Export get-entries distribution metrics
  -handler_prefix string
    	If set e.g. to '/logs' will prefix all handlers that don't define a custom prefix
  -http_endpoint string
    	Endpoint for HTTP (host:port) (default "localhost:6962")
  -http_idle_timeout duration
    	Timeout after which idle connections will be closed by server (default -1s)
  -legacy_stderr_threshold_behavior
    	If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). If false, stderrthreshold is honored even when logtostderr=true (default true)
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_config string
    	File holding log config in text proto format
  -log_dir string
    	If non-empty, write log files in this directory (no effect when -logtostderr=true)
  -log_file string
    	If non-empty, use this log file (no effect when -logtostderr=true)
  -log_file_max_size uint
    	Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
  -log_rpc_server string
    	Backend specification; comma-separated list or etcd service name (if --etcd_servers specified). If unset backends are specified in config (as a LogMultiConfig proto)
  -logtostderr
    	log to standard error instead of files (default true)
  -mask_internal_errors
    	Don't return error strings with Internal Server Error HTTP responses
  -max_cert_chain_size int
    	Maximum size of certificate chain in bytes for add-chain and add-pre-chain endpoints (default: 512000 bytes = 500KB) (default 512000)
  -max_get_entries int
    	Max number of entries we allow in a get-entries request (0=>use default 1000)
  -metrics_endpoint string
    	Endpoint for serving metrics; if left empty, metrics will be visible on --http_endpoint
  -non_fresh_submission_age duration
    	Maximum age of a fresh submission (default 24h0m0s)
  -non_fresh_submission_burst int
    	Maximum burst size when rate-limiting non-fresh submissions (default 1)
  -non_fresh_submission_limit string
    	Maximum rate at which non-fresh submissions will be accepted (e.g., "30/1s"; or "" to disable)
  -one_output
    	If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
  -pkcs11_module_path string
    	Path to the PKCS#11 module to use for keys that use the PKCS#11 interface
  -quota_intermediate
    	Enable requesting of quota for intermediate certificates in submitted chains (default true)
  -quota_remote
    	Enable requesting of quota for IP address sending incoming requests (default true)
  -rpc_deadline duration
    	Deadline for backend RPC requests (default 10s)
  -skip_headers
    	If true, avoid header prefixes in the log messages
  -skip_log_headers
    	If true, avoid headers when opening log files (no effect when -logtostderr=true)
  -stderrthreshold value
    	logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)
  -tls_certificate string
    	Path to server TLS certificate
  -tls_key string
    	Path to server TLS private key
  -tracing
    	If true opencensus Stackdriver tracing will be enabled. See https://opencensus.io/.
  -tracing_percent int
    	Percent of requests to be traced. Zero is a special case to use the DefaultSampler
  -tracing_project_id string
    	project ID to pass to stackdriver. Can be empty for GCP, consult docs for other platforms.
  -trillian_tls_ca_cert_file string
    	CA certificate file to use for secure connections with Trillian server
  -v value
    	number for the log level verbosity
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
Options (46)
OptionDescriptionSource
-add_dir_headerIf true, adds the file directory to the header of the log messageshelp
-align_getentriesEnable get-entries request alignment (default true)help
-alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
-alsologtostderrthreshold valuelogs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)help
-cache_size intSize parameter set to 0 makes cache of unlimited size (default -1)help
-cache_ttl durationProviding 0 TTL turns expiring off (default -1s)help
-cache_type stringSupported cache type: noop, lru (Default: noop) (default "noop")help
-etcd_http_service stringService name to announce our HTTP endpoint under (default "trillian-ctfe-http")help
-etcd_metrics_service stringService name to announce our HTTP metrics endpoint under (default "trillian-ctfe-metrics-http")help
-etcd_servers stringA comma-separated list of etcd servershelp
-get_sth_interval durationInterval between internal get-sth operations (0 to disable) (default 3m0s)help
-getentries_metricsExport get-entries distribution metricshelp
-handler_prefix stringIf set e.g. to '/logs' will prefix all handlers that don't define a custom prefixhelp
-http_endpoint stringEndpoint for HTTP (host:port) (default "localhost:6962")help
-http_idle_timeout durationTimeout after which idle connections will be closed by server (default -1s)help
-legacy_stderr_threshold_behaviorIf true, stderrthreshold is ignored when logtostderr=true (legacy behavior).help
-log_backtrace_at valuewhen logging hits line file:N, emit a stack tracehelp
-log_config stringFile holding log config in text proto formathelp
-log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
-log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
-log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
-log_rpc_server stringBackend specification;help
-logtostderrlog to standard error instead of files (default true)help
-mask_internal_errorsDon't return error strings with Internal Server Error HTTP responseshelp
-max_cert_chain_size intMaximum size of certificate chain in bytes for add-chain and add-pre-chain endpoints (default: 512000 bytes = 500KB) (default 512000)help
-max_get_entries intMax number of entries we allow in a get-entries request (0=>use default 1000)help
-metrics_endpoint stringEndpoint for serving metrics;help
-non_fresh_submission_age durationMaximum age of a fresh submission (default 24h0m0s)help
-non_fresh_submission_burst intMaximum burst size when rate-limiting non-fresh submissions (default 1)help
-non_fresh_submission_limit stringMaximum rate at which non-fresh submissions will be accepted (e.g., "30/1s";help
-one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
-pkcs11_module_path stringPath to the PKCS#11 module to use for keys that use the PKCS#11 interfacehelp
-quota_intermediateEnable requesting of quota for intermediate certificates in submitted chains (default true)help
-quota_remoteEnable requesting of quota for IP address sending incoming requests (default true)help
-rpc_deadline durationDeadline for backend RPC requests (default 10s)help
-skip_headersIf true, avoid header prefixes in the log messageshelp
-skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
-stderrthreshold valuelogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)help
-tls_certificate stringPath to server TLS certificatehelp
-tls_key stringPath to server TLS private keyhelp
-tracingIf true opencensus Stackdriver tracing will be enabled.help
-tracing_percent intPercent of requests to be traced.help
-tracing_project_id stringproject ID to pass to stackdriver.help
-trillian_tls_ca_cert_file stringCA certificate file to use for secure connections with Trillian serverhelp
-v valuenumber for the log level verbosityhelp
-vmodule valuecomma-separated list of pattern=N settings for file-filtered logginghelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.