diff options
| author | Rich Salz <rsalz@openssl.org> | 2016-08-13 10:47:50 -0400 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2016-08-19 11:45:45 -0400 |
| commit | ff5537c25565ad288ef00d67120b479c615bc6d3 (patch) | |
| tree | 2a060ec6769287eb4f74c4adba7c3ebdafdddcb1 /doc | |
| parent | a03f81f4ead24c234dc26e388d86a352685f3948 (diff) | |
RT3940: For now, just document the issue.
Reviewed-by: Richard Levitte <levitte@openssl.org>
(cherry picked from commit 2a9afa4046592d44af84644cd89fe1a0d6d46889)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/apps/cms.pod | 3 | ||||
| -rw-r--r-- | doc/apps/smime.pod | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/doc/apps/cms.pod b/doc/apps/cms.pod index 4eaedbcd34..ac69804228 100644 --- a/doc/apps/cms.pod +++ b/doc/apps/cms.pod @@ -86,6 +86,9 @@ encrypt mail for the given recipient certificates. Input file is the message to be encrypted. The output file is the encrypted mail in MIME format. The actual CMS type is <B>EnvelopedData<B>. +Note that no revocation check is done for the recipient cert, so if that +key has been compromised, others may be able to decrypt the text. + =item B<-decrypt> decrypt mail using the supplied certificate and private key. Expects an diff --git a/doc/apps/smime.pod b/doc/apps/smime.pod index d5618c8ff0..04a83ca8e4 100644 --- a/doc/apps/smime.pod +++ b/doc/apps/smime.pod @@ -53,6 +53,9 @@ The meaning of the other options varies according to the operation type. encrypt mail for the given recipient certificates. Input file is the message to be encrypted. The output file is the encrypted mail in MIME format. +Note that no revocation check is done for the recipient cert, so if that +key has been compromised, others may be able to decrypt the text. + =item B<-decrypt> decrypt mail using the supplied certificate and private key. Expects an |