summaryrefslogtreecommitdiff
path: root/src/lib/libssl/src/doc/apps/CA.pl.pod
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libssl/src/doc/apps/CA.pl.pod')
-rw-r--r--src/lib/libssl/src/doc/apps/CA.pl.pod11
1 files changed, 9 insertions, 2 deletions
diff --git a/src/lib/libssl/src/doc/apps/CA.pl.pod b/src/lib/libssl/src/doc/apps/CA.pl.pod
index 9d287f0c4d..63cd1320cc 100644
--- a/src/lib/libssl/src/doc/apps/CA.pl.pod
+++ b/src/lib/libssl/src/doc/apps/CA.pl.pod
@@ -69,9 +69,16 @@ list box), otherwise the name "My Certificate" is used.
69 69
70calls the B<ca> program to sign a certificate request. It expects the request 70calls the B<ca> program to sign a certificate request. It expects the request
71to be in the file "newreq.pem". The new certificate is written to the file 71to be in the file "newreq.pem". The new certificate is written to the file
72"newcert.pem" except in the case of the B<-xcert> option when it is written 72"newcert.pem" except in the case of the B<-xsign> option when it is written
73to standard output. 73to standard output.
74 74
75
76=item B<-signCA>
77
78this option is the same as the B<-signreq> option except it uses the configuration
79file section B<v3_ca> and so makes the signed request a valid CA certificate. This
80is useful when creating intermediate CA from a root CA.
81
75=item B<-signcert> 82=item B<-signcert>
76 83
77this option is the same as B<-sign> except it expects a self signed certificate 84this option is the same as B<-sign> except it expects a self signed certificate
@@ -122,7 +129,7 @@ Create the CA directories and files:
122 129
123enter cacert.pem when prompted for the CA file name. 130enter cacert.pem when prompted for the CA file name.
124 131
125Create a DSA certificate request and privat key (a different set of parameters 132Create a DSA certificate request and private key (a different set of parameters
126can optionally be created first): 133can optionally be created first):
127 134
128 openssl req -out newreq.pem -newkey dsa:dsap.pem 135 openssl req -out newreq.pem -newkey dsa:dsap.pem