diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2022-05-31 10:03:10 +0200 |
|---|---|---|
| committer | Hugo Landau <hlandau@openssl.org> | 2022-07-14 07:24:27 +0100 |
| commit | c54a6a4b0ef664313fb07617d6a8c26a808719e0 (patch) | |
| tree | 82ee40644440b778fed333ace83f44f39da498dd /apps | |
| parent | aa73b7d352c383e415d4d7567b79ce074c6762cd (diff) | |
apps/x509: add warnings for options ignored when -CA is not specified
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18373)
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/x509.c | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/apps/x509.c b/apps/x509.c index ee7bbe471b..ccada5dee0 100644 --- a/apps/x509.c +++ b/apps/x509.c @@ -662,9 +662,19 @@ int x509_main(int argc, char **argv) BIO_printf(bio_err, "Cannot use both -key/-signkey and -CA option\n"); goto err; } - } else if (CAkeyfile != NULL) { - BIO_printf(bio_err, - "Warning: ignoring -CAkey option since no -CA option is given\n"); + } else { +#define WARN_NO_CA(opt) BIO_printf(bio_err, \ + "Warning: ignoring " opt " option since -CA option is not given\n"); + if (CAkeyfile != NULL) + WARN_NO_CA("-CAkey"); + if (CAkeyformat != FORMAT_UNDEF) + WARN_NO_CA("-CAkeyform"); + if (CAformat != FORMAT_UNDEF) + WARN_NO_CA("-CAform"); + if (CAserial != NULL) + WARN_NO_CA("-CAserial"); + if (CA_createserial) + WARN_NO_CA("-CAcreateserial"); } if (extfile == NULL) { |