summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/x509v3.cnf.5
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libcrypto/man/x509v3.cnf.5')
-rw-r--r--src/lib/libcrypto/man/x509v3.cnf.517
1 files changed, 9 insertions, 8 deletions
diff --git a/src/lib/libcrypto/man/x509v3.cnf.5 b/src/lib/libcrypto/man/x509v3.cnf.5
index 22e013a87e..1fd4c0cc9f 100644
--- a/src/lib/libcrypto/man/x509v3.cnf.5
+++ b/src/lib/libcrypto/man/x509v3.cnf.5
@@ -1,4 +1,4 @@
1.\" $OpenBSD: x509v3.cnf.5,v 1.1 2016/12/11 18:06:09 schwarze Exp $ 1.\" $OpenBSD: x509v3.cnf.5,v 1.2 2016/12/12 22:02:55 jmc Exp $
2.\" OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400 2.\" OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
3.\" 3.\"
4.\" This file was written by Dr. Stephen Henson <steve@openssl.org>. 4.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
49.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 49.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50.\" OF THE POSSIBILITY OF SUCH DAMAGE. 50.\" OF THE POSSIBILITY OF SUCH DAMAGE.
51.\" 51.\"
52.Dd $Mdocdate: December 11 2016 $ 52.Dd $Mdocdate: December 12 2016 $
53.Dt X509V3.CNF 5 53.Dt X509V3.CNF 5
54.Os 54.Os
55.Sh NAME 55.Sh NAME
@@ -108,7 +108,7 @@ The correct syntax to use is defined by the extension code itself:
108check out the certificate policies extension for an example. 108check out the certificate policies extension for an example.
109.Pp 109.Pp
110If an extension type is unsupported, then the arbitrary extension 110If an extension type is unsupported, then the arbitrary extension
111syntax must be used, see the 111syntax must be used; see the
112.Sx ARBITRARY EXTENSIONS 112.Sx ARBITRARY EXTENSIONS
113section for more details. 113section for more details.
114.Sh STANDARD EXTENSIONS 114.Sh STANDARD EXTENSIONS
@@ -267,7 +267,7 @@ These include
267.Pp 267.Pp
268The 268The
269.Ic email 269.Ic email
270option include a special 270option can include a special
271.Cm copy 271.Cm copy
272value. 272value.
273This will automatically include any email addresses contained in the 273This will automatically include any email addresses contained in the
@@ -421,7 +421,7 @@ are not recognized.
421.Pp 421.Pp
422The name 422The name
423.Ic onlysomereasons 423.Ic onlysomereasons
424is accepted which sets this field. 424is accepted, which sets this field.
425The value is in the same format as the CRL distribution point 425The value is in the same format as the CRL distribution point
426.Ic reasons 426.Ic reasons
427field. 427field.
@@ -457,7 +457,7 @@ This is a raw extension.
457All the fields of this extension can be set by using the appropriate 457All the fields of this extension can be set by using the appropriate
458syntax. 458syntax.
459.Pp 459.Pp
460If you follow the PKIX recommendations and just using one OID, then you 460If you follow the PKIX recommendations and just use one OID, then you
461just include the value of that OID. 461just include the value of that OID.
462Multiple OIDs can be set separated by commas, for example: 462Multiple OIDs can be set separated by commas, for example:
463.Pp 463.Pp
@@ -493,6 +493,7 @@ options.
493and 493and
494.Ic organization 494.Ic organization
495are text strings, 495are text strings,
496and
496.Ic noticeNumbers 497.Ic noticeNumbers
497is a comma separated list of numbers. 498is a comma separated list of numbers.
498The 499The
@@ -553,7 +554,7 @@ The name constraints extension is a multi-valued extension.
553The name should begin with the word 554The name should begin with the word
554.Cm permitted 555.Cm permitted
555or 556or
556.Cm excluded 557.Cm excluded ,
557followed by a semicolon. 558followed by a semicolon.
558The rest of the name and the value follows the syntax of subjectAltName 559The rest of the name and the value follows the syntax of subjectAltName
559except 560except
@@ -590,7 +591,7 @@ Example:
590.Pp 591.Pp
591.Dl tlsfeature = status_request 592.Dl tlsfeature = status_request
592.Sh DEPRECATED EXTENSIONS 593.Sh DEPRECATED EXTENSIONS
593The following extensions are non standard, Netscape specific and largely 594The following extensions are non-standard, Netscape specific and largely
594obsolete. 595obsolete.
595Their use in new applications is discouraged. 596Their use in new applications is discouraged.
596.Ss Netscape string extensions 597.Ss Netscape string extensions