From 2f78e01eb5d670b87508509ba9bebc67672d4aba Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Tue, 2 Apr 2024 18:47:26 +0200 Subject: openssl-crl(1): The -verify option is implied by -CA* options Reviewed-by: Dmitry Belyavskiy Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/24024) (cherry picked from commit a16f2e7651b22ee992bb0c279e25164b519c1e80) --- doc/man1/openssl-crl.pod.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/doc/man1/openssl-crl.pod.in b/doc/man1/openssl-crl.pod.in index 5cd5852bb6..4327b6157b 100644 --- a/doc/man1/openssl-crl.pod.in +++ b/doc/man1/openssl-crl.pod.in @@ -97,6 +97,9 @@ Verify the signature in the CRL. If the verification fails, the program will immediately exit, i.e. further option processing (e.g. B<-gendelta>) is skipped. +This option is implicitly enabled if any of B<-CApath>, B<-CAfile> +or B<-CAstore> is specified. + =item B<-noout> Don't output the encoded version of the CRL. -- cgit v1.2.3