summaryrefslogtreecommitdiffstats
path: root/doc/man1/openssl-cmp.pod.in
diff options
context:
space:
mode:
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>2022-02-17 19:46:29 +0100
committerDr. David von Oheimb <dev@ddvo.net>2022-02-22 12:01:57 +0100
commitcd7ec0bca00ceb6e8d4af46a57c6c096a7ed8947 (patch)
treef0c9eec493d9a5b9b59541ff5b72471e21a6a43c /doc/man1/openssl-cmp.pod.in
parentchacha20 performance optimizations for ppc64le with 8x lanes, (diff)
downloadopenssl-cd7ec0bca00ceb6e8d4af46a57c6c096a7ed8947.tar.xz
openssl-cd7ec0bca00ceb6e8d4af46a57c6c096a7ed8947.zip
CMP: add subject of any provided CSR as default message sender
Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/17723)
Diffstat (limited to 'doc/man1/openssl-cmp.pod.in')
-rw-r--r--doc/man1/openssl-cmp.pod.in4
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in
index 705baf1dd6..5a111a39eb 100644
--- a/doc/man1/openssl-cmp.pod.in
+++ b/doc/man1/openssl-cmp.pod.in
@@ -273,7 +273,7 @@ or of the reference certificate (see B<-oldcert>) if provided.
This default is used for IR and CR only if no SANs are set.
If the NULL-DN (C<"/">) is given then no subject is placed in the template.
-If provided and neither B<-cert> nor B<-oldcert> is given,
+If provided and neither of B<-cert>, B<-oldcert>, or B<-csr> is given,
the subject DN is used as fallback sender of outgoing CMP messages.
The argument must be formatted as I</type0=value0/type1=value1/type2=...>.
@@ -360,6 +360,8 @@ When used with B<-cmd> I<ir>, I<cr>, or I<kur>, it is transformed into the
respective regular CMP request.
It may also be used with B<-cmd> I<rr> to specify the certificate to be revoked
via the included subject name and public key.
+Its subject is used as fallback sender in CMP message headers
+if B<-cert> and B<-oldcert> are not given.
=item B<-out_trusted> I<filenames>|I<uris>