diff options
| author | Rich Salz <rsalz@akamai.com> | 2019-10-09 21:48:33 -0400 |
|---|---|---|
| committer | Tomas Mraz <tmraz@fedoraproject.org> | 2019-10-23 10:53:03 +0200 |
| commit | 777182a0c77ee374e43b94546f49b25f37945c0e (patch) | |
| tree | e14a1ff25be02b311873b0b2baa7769f4f43a73c /doc/man1/openssl-req.pod | |
| parent | 3c77a41b3097eb9255be834e94152b8f7625241f (diff) | |
Document the -inform, etc., in openssl.pod
Add P12 format description.
Remove PEM NOTES sections; it's in openssl.pod
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10142)
Diffstat (limited to 'doc/man1/openssl-req.pod')
| -rw-r--r-- | doc/man1/openssl-req.pod | 32 |
1 files changed, 7 insertions, 25 deletions
diff --git a/doc/man1/openssl-req.pod b/doc/man1/openssl-req.pod index b84a4c92ab..f976b7948e 100644 --- a/doc/man1/openssl-req.pod +++ b/doc/man1/openssl-req.pod @@ -67,17 +67,12 @@ for use as root CAs for example. Print out a usage message. -=item B<-inform> B<DER>|B<PEM> +=item B<-inform> B<DER>|B<PEM>, B<-outform> B<DER>|B<PEM> -This specifies the input format. The B<DER> option uses an ASN1 DER encoded -form compatible with the PKCS#10. The B<PEM> form is the default format: it -consists of the B<DER> format base64 encoded with additional header and -footer lines. +The input and formats; the default is B<PEM>. +See L<openssl(1)/Format Options> for details. -=item B<-outform> B<DER>|B<PEM> - -This specifies the output format, the options have the same meaning and default -as the B<-inform> option. +The data is a PKCS#10 object. =item B<-in> I<filename> @@ -182,8 +177,8 @@ accepts PKCS#8 format private keys for PEM format files. =item B<-keyform> B<DER>|B<PEM> -The format of the private key file specified in the B<-key> -argument. PEM is the default. +The format of the private key; the default is B<PEM>. +See L<openssl(1)/Format Options> for details. =item B<-keyout> I<filename> @@ -628,23 +623,10 @@ on the command line: =head1 NOTES -The header and footer lines in the B<PEM> format are normally: - - -----BEGIN CERTIFICATE REQUEST----- - -----END CERTIFICATE REQUEST----- - -some software (some versions of Netscape certificate server) instead needs: - - -----BEGIN NEW CERTIFICATE REQUEST----- - -----END NEW CERTIFICATE REQUEST----- - -which is produced with the B<-newhdr> option but is otherwise compatible. -Either form is accepted transparently on input. - The certificate requests generated by B<Xenroll> with MSIE have extensions added. It includes the B<keyUsage> extension which determines the type of key (signature only or general purpose) and any additional OIDs entered -by the script in an extendedKeyUsage extension. +by the script in an B<extendedKeyUsage> extension. =head1 DIAGNOSTICS |