summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/usr.bin/openssl/openssl.124
1 files changed, 12 insertions, 12 deletions
diff --git a/src/usr.bin/openssl/openssl.1 b/src/usr.bin/openssl/openssl.1
index 1d77ad9219..ce263728fa 100644
--- a/src/usr.bin/openssl/openssl.1
+++ b/src/usr.bin/openssl/openssl.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: openssl.1,v 1.40 2016/07/23 19:31:35 jmc Exp $ 1.\" $OpenBSD: openssl.1,v 1.41 2016/07/28 16:20:21 jmc Exp $
2.\" ==================================================================== 2.\" ====================================================================
3.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. 3.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
4.\" 4.\"
@@ -112,7 +112,7 @@
112.\" 112.\"
113.\" OPENSSL 113.\" OPENSSL
114.\" 114.\"
115.Dd $Mdocdate: July 23 2016 $ 115.Dd $Mdocdate: July 28 2016 $
116.Dt OPENSSL 1 116.Dt OPENSSL 1
117.Os 117.Os
118.Sh NAME 118.Sh NAME
@@ -255,7 +255,7 @@ Indent the output according to the
255.Qq depth 255.Qq depth
256of the structures. 256of the structures.
257.It Fl in Ar file 257.It Fl in Ar file
258The input file; the default is standard input. 258The input file to read from, or standard input if not specified.
259.It Fl inform Cm der | pem | txt 259.It Fl inform Cm der | pem | txt
260The input format. 260The input format.
261.It Fl length Ar number 261.It Fl length Ar number
@@ -349,7 +349,7 @@ It also maintains a text database of issued certificates and their status.
349The options relevant to CAs are as follows: 349The options relevant to CAs are as follows:
350.Bl -tag -width "XXXX" 350.Bl -tag -width "XXXX"
351.It Fl batch 351.It Fl batch
352This sets the batch mode. 352Batch mode.
353In this mode no questions will be asked 353In this mode no questions will be asked
354and all certificates will be certified automatically. 354and all certificates will be certified automatically.
355.It Fl cert Ar file 355.It Fl cert Ar file
@@ -359,7 +359,7 @@ Specifies the configuration file to use.
359.It Fl days Ar arg 359.It Fl days Ar arg
360The number of days to certify the certificate for. 360The number of days to certify the certificate for.
361.It Fl enddate Ar date 361.It Fl enddate Ar date
362This allows the expiry date to be explicitly set. 362Set the expiry date.
363The format of the date is YYMMDDHHMMSSZ 363The format of the date is YYMMDDHHMMSSZ
364.Pq the same as an ASN1 UTCTime structure . 364.Pq the same as an ASN1 UTCTime structure .
365.It Fl extensions Ar section 365.It Fl extensions Ar section
@@ -449,7 +449,7 @@ appended.
449.It Fl passin Ar arg 449.It Fl passin Ar arg
450The key password source. 450The key password source.
451.It Fl policy Ar arg 451.It Fl policy Ar arg
452This option defines the CA 452Define the CA
453.Qq policy 453.Qq policy
454to use. 454to use.
455The policy section in the configuration file 455The policy section in the configuration file
@@ -491,7 +491,7 @@ then it can be preceded by a number and a
491.It Fl ss_cert Ar file 491.It Fl ss_cert Ar file
492A single self-signed certificate to be signed by the CA. 492A single self-signed certificate to be signed by the CA.
493.It Fl startdate Ar date 493.It Fl startdate Ar date
494This allows the start date to be explicitly set. 494Set the start date.
495The format of the date is YYMMDDHHMMSSZ 495The format of the date is YYMMDDHHMMSSZ
496.Pq the same as an ASN1 UTCTime structure . 496.Pq the same as an ASN1 UTCTime structure .
497.It Fl status Ar serial 497.It Fl status Ar serial
@@ -500,7 +500,7 @@ Show the status of the certificate with serial number
500.It Fl updatedb 500.It Fl updatedb
501Update database for expired certificates. 501Update database for expired certificates.
502.It Fl verbose 502.It Fl verbose
503This prints extra details about the operations being performed. 503Print extra details about the operations being performed.
504.El 504.El
505.Pp 505.Pp
506The options relevant to CRLs are as follows: 506The options relevant to CRLs are as follows:
@@ -510,12 +510,12 @@ This is the same as
510.Fl crl_compromise , 510.Fl crl_compromise ,
511except the revocation reason is set to CACompromise. 511except the revocation reason is set to CACompromise.
512.It Fl crl_compromise Ar time 512.It Fl crl_compromise Ar time
513This sets the revocation reason to keyCompromise and the compromise time to 513Set the revocation reason to keyCompromise and the compromise time to
514.Ar time . 514.Ar time .
515.Ar time 515.Ar time
516should be in GeneralizedTime format, i.e. YYYYMMDDHHMMSSZ. 516should be in GeneralizedTime format, i.e. YYYYMMDDHHMMSSZ.
517.It Fl crl_hold Ar instruction 517.It Fl crl_hold Ar instruction
518This sets the CRL revocation reason code to certificateHold and the hold 518Set the CRL revocation reason code to certificateHold and the hold
519instruction to 519instruction to
520.Ar instruction 520.Ar instruction
521which must be an OID. 521which must be an OID.
@@ -556,7 +556,7 @@ can't handle V2 CRLs.
556.It Fl crlhours Ar num 556.It Fl crlhours Ar num
557The number of hours before the next CRL is due. 557The number of hours before the next CRL is due.
558.It Fl gencrl 558.It Fl gencrl
559This option generates a CRL based on information in the index file. 559Generate a CRL based on information in the index file.
560.It Fl revoke Ar file 560.It Fl revoke Ar file
561A 561A
562.Ar file 562.Ar file
@@ -793,7 +793,7 @@ The
793command converts 793command converts
794.Nm openssl 794.Nm openssl
795cipher lists into ordered SSL cipher preference lists. 795cipher lists into ordered SSL cipher preference lists.
796It can be used as a test tool to determine the appropriate cipherlist. 796It can be used as a way to determine the appropriate cipher list.
797.Pp 797.Pp
798The options are as follows: 798The options are as follows:
799.Bl -tag -width Ds 799.Bl -tag -width Ds