summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>2020-07-25 13:47:04 +0200
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>2020-08-04 12:11:46 +0200
commitebc1e8fc4ec2888fdb99d487c064d8ef586f3ee3 (patch)
tree7244bc61b9dd29fbd90c7617eb37147bfae3b11f
parent4c525cb5b6bbc85de592cb7bf623676a914b8dae (diff)
openssl-cmp.pod.in: Update and extend example using Insta Demo CA
Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/12534)
-rw-r--r--apps/insta.ca.crtbin0 -> 916 bytes
-rw-r--r--doc/man1/openssl-cmp.pod.in6
2 files changed, 6 insertions, 0 deletions
diff --git a/apps/insta.ca.crt b/apps/insta.ca.crt
new file mode 100644
index 0000000000..6aea6d4f97
--- /dev/null
+++ b/apps/insta.ca.crt
Binary files differ
diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in
index 45355cbdb3..8d3e686b55 100644
--- a/doc/man1/openssl-cmp.pod.in
+++ b/doc/man1/openssl-cmp.pod.in
@@ -991,8 +991,10 @@ to issue the following shell commands.
cd /path/to/openssl
export OPENSSL_CONF=openssl.cnf
+=begin comment
wget 'http://pki.certificate.fi:8080/install-ca-cert.html/ca-certificate.crt\
?ca-id=632&download-certificate=1' -O insta.ca.crt
+=end comment
openssl genrsa -out insta.priv.pem
openssl cmp -section insta
@@ -1048,7 +1050,11 @@ or
Many more options can be used in the configuration file
and/or on the command line.
+For instance, the B<-reqexts> CLI option may refer to a section in the
+configuration file defining X.509 extensions to use in certificate requests,
+such as B<v3_req> in F<openssl/apps/openssl.cnf>:
+ openssl cmp -section insta,cr -reqexts v3_req
=head2 Certificate enrollment