diff options
| author | Rich Salz <rsalz@akamai.com> | 2020-03-04 14:41:53 -0500 |
|---|---|---|
| committer | Dmitry Belyavskiy <beldmit@gmail.com> | 2020-03-07 12:58:02 +0300 |
| commit | d462b5ff21e9fcdef98447c8f8d8c694b1e79602 (patch) | |
| tree | 8f7758c550167372258e36458adb1f913aca3417 /doc/man1 | |
| parent | 6bd4e3f231d74578b97821d981d42583fec5c2f3 (diff) | |
Add -section option to 'req' command
This removes "req" as the hardwired section for the req command.
Doing this will let us merge some test configs.
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/11249)
Diffstat (limited to 'doc/man1')
| -rw-r--r-- | doc/man1/openssl-ca.pod.in | 5 | ||||
| -rw-r--r-- | doc/man1/openssl-req.pod.in | 15 |
2 files changed, 17 insertions, 3 deletions
diff --git a/doc/man1/openssl-ca.pod.in b/doc/man1/openssl-ca.pod.in index 8eef310ca4..a3c83d8076 100644 --- a/doc/man1/openssl-ca.pod.in +++ b/doc/man1/openssl-ca.pod.in @@ -12,6 +12,7 @@ B<openssl> B<ca> [B<-verbose>] [B<-config> I<filename>] [B<-name> I<section>] +[B<-section> I<section>] [B<-gencrl>] [B<-revoke> I<file>] [B<-valid> I<file>] @@ -94,7 +95,7 @@ Specifies the configuration file to use. Optional; for a description of the default value, see L<openssl(1)/COMMAND SUMMARY>. -=item B<-name> I<section> +=item B<-name> I<section>, B<-section> I<section> Specifies the configuration file section to use (overrides B<default_ca> in the B<ca> section). @@ -772,6 +773,8 @@ seeding mechanism. The new seeding mechanism makes it unnecessary to define a RANDFILE for saving and restoring randomness. This option is retained mainly for compatibility reasons. +The B<-section> option was added in OpenSSL 3.0.0. + =head1 SEE ALSO L<openssl(1)>, diff --git a/doc/man1/openssl-req.pod.in b/doc/man1/openssl-req.pod.in index 703a208bc1..7587cb5a71 100644 --- a/doc/man1/openssl-req.pod.in +++ b/doc/man1/openssl-req.pod.in @@ -30,6 +30,7 @@ B<openssl> B<req> [B<-keygen_engine> I<id>] [B<-I<digest>>] [B<-config> I<filename>] +[B<-section> I<name>] [B<-multivalue-rdn>] [B<-x509>] [B<-days> I<n>] @@ -206,6 +207,10 @@ This allows an alternative configuration file to be specified. Optional; for a description of the default value, see L<openssl(1)/COMMAND SUMMARY>. +=item B<-section> I<name> + +Specifies the name of the section to use; the default is B<req>. + =item B<-subj> I<arg> Sets subject name for new request or supersedes the subject name @@ -331,8 +336,10 @@ argument for this option is string of hexadecimal digits. =head1 CONFIGURATION FILE FORMAT The configuration options are specified in the B<req> section of -the configuration file. As with all configuration files if no -value is specified in the specific section (i.e. B<req>) then +the configuration file. An alternate name be specified by using the +B<-section> option. +As with all configuration files, if no +value is specified in the specific section then the initial unnamed or B<default> section is searched too. The options available are described in detail below. @@ -678,6 +685,10 @@ L<openssl-gendsa(1)>, L<config(5)>, L<x509v3_config(5)> +=head1 HISTORY + +The B<-section> option was added in OpenSSL 3.0.0. + =head1 COPYRIGHT Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved. |