summaryrefslogtreecommitdiffstats
path: root/doc/man1
diff options
context:
space:
mode:
authorDmitry Belyavskiy <beldmit@gmail.com>2021-08-02 17:00:51 +0200
committerDmitry Belyavskiy <beldmit@gmail.com>2021-08-03 22:04:11 +0200
commit6b38d7dc1bccc708279ca5091ebc28cd4bdf225d (patch)
tree0f1eb24e8948f7aaa0cbf38cdfea0e774341ac70 /doc/man1
parentab98861e919b8f8f7fee3f2d44ef3b4b05908a25 (diff)
If we have passed the private key, don't copy it implicitly
Fixes #16197 Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/16199)
Diffstat (limited to 'doc/man1')
-rw-r--r--doc/man1/openssl-req.pod.in11
1 files changed, 6 insertions, 5 deletions
diff --git a/doc/man1/openssl-req.pod.in b/doc/man1/openssl-req.pod.in
index 7897610818..75d0da1743 100644
--- a/doc/man1/openssl-req.pod.in
+++ b/doc/man1/openssl-req.pod.in
@@ -205,11 +205,12 @@ See L<openssl-format-options(1)> for details.
=item B<-keyout> I<filename>
This gives the filename to write any private key to that has been newly created
-or read from B<-key>.
-If the B<-keyout> option is not given the filename specified in the
-configuration file with the B<default_keyfile> option is used, if present.
-If a new key is generated and no filename is specified
-the key is written to standard output.
+or read from B<-key>. If neither the B<-keyout> option nor the B<-key> option
+are given then the filename specified in the configuration file with the
+B<default_keyfile> option is used, if present. Thus, if you want to write the
+private key and the B<-key> option is provided, you should provide the
+B<-keyout> option explicitly. If a new key is generated and no filename is
+specified the key is written to standard output.
=item B<-noenc>