diff options
| author | Matt Caswell <matt@openssl.org> | 2018-05-17 16:24:29 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2018-05-18 10:14:29 +0100 |
| commit | f3021aca4a154c2ff9bd0030f7974eb6a719550d (patch) | |
| tree | 357805e6c31ea2d2035c7e119ae52c214e336c7f /doc/man1 | |
| parent | 8a59c08583424d59ac30c1261eedff40d653f8b0 (diff) | |
Allow the ca application to use EdDSA
Using the ca application to sign certificates with EdDSA failed because it
is not possible to set the digest to "null". This adds the capability and
updates the documentation accordingly.
Fixes #6201
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6286)
Diffstat (limited to 'doc/man1')
| -rw-r--r-- | doc/man1/ca.pod | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/man1/ca.pod b/doc/man1/ca.pod index 9b25345859..ebd8a4386a 100644 --- a/doc/man1/ca.pod +++ b/doc/man1/ca.pod @@ -184,7 +184,8 @@ The number of days to certify the certificate for. =item B<-md alg> The message digest to use. -Any digest supported by the OpenSSL B<dgst> command can be used. +Any digest supported by the OpenSSL B<dgst> command can be used. If the signing +key is using Ed25519 or Ed448 then you should specify "null" for the digest. This option also applies to CRLs. =item B<-policy arg> |