From ebc1e8fc4ec2888fdb99d487c064d8ef586f3ee3 Mon Sep 17 00:00:00 2001 From: "Dr. David von Oheimb" Date: Sat, 25 Jul 2020 13:47:04 +0200 Subject: openssl-cmp.pod.in: Update and extend example using Insta Demo CA Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/12534) --- apps/insta.ca.crt | Bin 0 -> 916 bytes doc/man1/openssl-cmp.pod.in | 6 ++++++ 2 files changed, 6 insertions(+) create mode 100644 apps/insta.ca.crt diff --git a/apps/insta.ca.crt b/apps/insta.ca.crt new file mode 100644 index 0000000000..6aea6d4f97 Binary files /dev/null and b/apps/insta.ca.crt differ diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in index 45355cbdb3..8d3e686b55 100644 --- a/doc/man1/openssl-cmp.pod.in +++ b/doc/man1/openssl-cmp.pod.in @@ -991,8 +991,10 @@ to issue the following shell commands. cd /path/to/openssl export OPENSSL_CONF=openssl.cnf +=begin comment wget 'http://pki.certificate.fi:8080/install-ca-cert.html/ca-certificate.crt\ ?ca-id=632&download-certificate=1' -O insta.ca.crt +=end comment openssl genrsa -out insta.priv.pem openssl cmp -section insta @@ -1048,7 +1050,11 @@ or Many more options can be used in the configuration file and/or on the command line. +For instance, the B<-reqexts> CLI option may refer to a section in the +configuration file defining X.509 extensions to use in certificate requests, +such as B in F: + openssl cmp -section insta,cr -reqexts v3_req =head2 Certificate enrollment -- cgit v1.2.3