diff options
| author | Bastian Germann <bage@linutronix.de> | 2020-02-13 11:45:50 +0100 |
|---|---|---|
| committer | Tomas Mraz <tmraz@fedoraproject.org> | 2020-02-26 17:23:53 +0100 |
| commit | d4c3bdb0f1fffeab899926a85f1b27aabcfd9fa4 (patch) | |
| tree | bdc6a1a061e05ffe31ad573e2d42db4c6cc8e3f2 /doc/man1 | |
| parent | 38e6c4907e3b81f05d384d2c938c55762221de63 (diff) | |
apps x509: restrict CAkeyform option to OPT_FMT_PDE
CAkeyform may be set to PEM, DER or ENGINE, but the current options
are not using the proper optionformat 'E' (OPT_FMT_PDE) for this.
Set the valtype for CAkeyform to 'E' and use OPT_FMT_PDE when extracting
the option value.
This amends 0ab6fc79a9a ("Fix regression on x509 keyform argument") which
did the same thing for keyform and changed the manpage synopsis entries
for both keyform and CAkeyform but did not change the option section.
Hence, change the option section for both of them.
CLA: trivial
Co-developed-by: Torben Hohn <torben.hohn@linutronix.de>
Signed-off-by: Torben Hohn <torben.hohn@linutronix.de>
Signed-off-by: Bastian Germann <bage@linutronix.de>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/11085)
Diffstat (limited to 'doc/man1')
| -rw-r--r-- | doc/man1/openssl-x509.pod.in | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/man1/openssl-x509.pod.in b/doc/man1/openssl-x509.pod.in index 50496984f8..1ec2110100 100644 --- a/doc/man1/openssl-x509.pod.in +++ b/doc/man1/openssl-x509.pod.in @@ -383,12 +383,12 @@ certificate is being created from another certificate (for example with the B<-signkey> or the B<-CA> options). Normally all extensions are retained. -=item B<-keyform> B<DER>|B<PEM> +=item B<-keyform> B<DER>|B<PEM>|B<ENGINE> The key format; the default is B<PEM>. See L<openssl(1)/Format Options> for details. -=item B<-CAform> B<DER>|B<PEM>, B<-CAkeyform> B<DER>|B<PEM> +=item B<-CAform> B<DER>|B<PEM>, B<-CAkeyform> B<DER>|B<PEM>|B<ENGINE> The format for the CA certificate and key; the default is B<PEM>. See L<openssl(1)/Format Options> for details. |