diff options
Diffstat (limited to 'src/lib/libssl/src/doc/apps/CA.pl.pod')
-rw-r--r-- | src/lib/libssl/src/doc/apps/CA.pl.pod | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/src/lib/libssl/src/doc/apps/CA.pl.pod b/src/lib/libssl/src/doc/apps/CA.pl.pod index 9d287f0c4d..63cd1320cc 100644 --- a/src/lib/libssl/src/doc/apps/CA.pl.pod +++ b/src/lib/libssl/src/doc/apps/CA.pl.pod | |||
@@ -69,9 +69,16 @@ list box), otherwise the name "My Certificate" is used. | |||
69 | 69 | ||
70 | calls the B<ca> program to sign a certificate request. It expects the request | 70 | calls the B<ca> program to sign a certificate request. It expects the request |
71 | to be in the file "newreq.pem". The new certificate is written to the file | 71 | to be in the file "newreq.pem". The new certificate is written to the file |
72 | "newcert.pem" except in the case of the B<-xcert> option when it is written | 72 | "newcert.pem" except in the case of the B<-xsign> option when it is written |
73 | to standard output. | 73 | to standard output. |
74 | 74 | ||
75 | |||
76 | =item B<-signCA> | ||
77 | |||
78 | this option is the same as the B<-signreq> option except it uses the configuration | ||
79 | file section B<v3_ca> and so makes the signed request a valid CA certificate. This | ||
80 | is useful when creating intermediate CA from a root CA. | ||
81 | |||
75 | =item B<-signcert> | 82 | =item B<-signcert> |
76 | 83 | ||
77 | this option is the same as B<-sign> except it expects a self signed certificate | 84 | this option is the same as B<-sign> except it expects a self signed certificate |
@@ -122,7 +129,7 @@ Create the CA directories and files: | |||
122 | 129 | ||
123 | enter cacert.pem when prompted for the CA file name. | 130 | enter cacert.pem when prompted for the CA file name. |
124 | 131 | ||
125 | Create a DSA certificate request and privat key (a different set of parameters | 132 | Create a DSA certificate request and private key (a different set of parameters |
126 | can optionally be created first): | 133 | can optionally be created first): |
127 | 134 | ||
128 | openssl req -out newreq.pem -newkey dsa:dsap.pem | 135 | openssl req -out newreq.pem -newkey dsa:dsap.pem |