diff options
author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-07-11 11:21:06 +0200 |
---|---|---|
committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-07-30 20:10:07 +0200 |
commit | 87d20a96510ecc78068865423e0fa127d17486de (patch) | |
tree | dbd8ea8fb9de51daba87b2ebb2345465bb47f208 | |
parent | a3f15e237c0325718f488ebf9a242c031f4f864e (diff) |
apps/cmp.c: Improve documentation of -recipient option
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/12421)
-rw-r--r-- | apps/cmp.c | 4 | ||||
-rw-r--r-- | doc/man1/openssl-cmp.pod.in | 3 |
2 files changed, 4 insertions, 3 deletions
diff --git a/apps/cmp.c b/apps/cmp.c index 17b5bed6ff..102146a275 100644 --- a/apps/cmp.c +++ b/apps/cmp.c @@ -321,7 +321,7 @@ const OPTIONS cmp_options[] = { {OPT_MORE_STR, 0, 0, "also used as reference (defaulting to -cert) for subject DN and SANs."}, {OPT_MORE_STR, 0, 0, - "Its issuer is used as recipient unless -srvcert, -recipient or -issuer given"}, + "Its issuer is used as recipient unless -recipient, -srvcert, or -issuer given"}, {"revreason", OPT_REVREASON, 'n', "Reason code to include in revocation request (rr); possible values:"}, {OPT_MORE_STR, 0, 0, @@ -354,7 +354,7 @@ const OPTIONS cmp_options[] = { {"srvcert", OPT_SRVCERT, 's', "Server cert to pin and trust directly when verifying signed CMP responses"}, {"recipient", OPT_RECIPIENT, 's', - "Distinguished Name (DN) to use as msg recipient; see man page for defaults"}, + "DN of CA. Default: subject of -srvcert, -issuer, issuer of -oldcert or -cert"}, {"expect_sender", OPT_EXPECT_SENDER, 's', "DN of expected sender of responses. Defaults to subject of -srvcert, if any"}, {"ignore_keyusage", OPT_IGNORE_KEYUSAGE, '-', diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in index 216db0cb1f..45355cbdb3 100644 --- a/doc/man1/openssl-cmp.pod.in +++ b/doc/man1/openssl-cmp.pod.in @@ -506,10 +506,11 @@ and as default value for the expected sender of incoming CMP messages. =item B<-recipient> I<name> Distinguished Name (DN) to use in the recipient field of CMP request messages, -i.e., the CMP server (usually a CA or RA entity). +i.e., the CMP server (usually the addressed CA). The argument must be formatted as I</type0=value0/type1=value1/type2=...>, characters may be escaped by C<\>E<nbsp>(backslash), no spaces are skipped. +The empty name (NULL-DN) can be given explicitly as a single slash: 'I</>'. The recipient field in the header of a CMP message is mandatory. If not given explicitly the recipient is determined in the following order: |