diff options
| author | Richard Levitte <levitte@openssl.org> | 2020-11-30 07:25:46 +0100 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2020-12-02 20:19:31 +0100 |
| commit | f91d003a0ef0c748a11ccdb19c7661a3f2df9ab0 (patch) | |
| tree | 20ead7bd3ed8cee5bd59e1076644526959709a5b /doc/man1/openssl-x509.pod.in | |
| parent | APPS: Add OSSL_STORE loader for engine keys (diff) | |
| download | openssl-f91d003a0ef0c748a11ccdb19c7661a3f2df9ab0.tar.xz openssl-f91d003a0ef0c748a11ccdb19c7661a3f2df9ab0.zip | |
APPS: Adapt load_key() and load_pubkey() for the engine: loader
These two functions react when the FORMAT_ENGINE format is given, and
use the passed ENGINE |e| and the passed key argument to form a URI
suitable for the engine: loader.
Co-authored-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/13570)
Diffstat (limited to 'doc/man1/openssl-x509.pod.in')
| -rw-r--r-- | doc/man1/openssl-x509.pod.in | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/doc/man1/openssl-x509.pod.in b/doc/man1/openssl-x509.pod.in index e3e1fd2004..ffa2ab4aed 100644 --- a/doc/man1/openssl-x509.pod.in +++ b/doc/man1/openssl-x509.pod.in @@ -45,13 +45,13 @@ B<openssl> B<x509> [B<-setalias> I<arg>] [B<-days> I<arg>] [B<-set_serial> I<n>] -[B<-signkey> I<arg>] +[B<-signkey> I<filename>|I<uri>] [B<-badsig>] [B<-passin> I<arg>] [B<-x509toreq>] [B<-req>] [B<-CA> I<filename>] -[B<-CAkey> I<filename>] +[B<-CAkey> I<filename>|I<uri>] [B<-CAcreateserial>] [B<-CAserial> I<filename>] [B<-new>] @@ -351,10 +351,10 @@ can thus behave like a "mini CA". =over 4 -=item B<-signkey> I<arg> +=item B<-signkey> I<filename>|I<uri> This option causes the input file to be self signed using the supplied -private key or engine. +private key. It sets the issuer name to the subject name (i.e., makes it self-issued) and changes the public key to the supplied value (unless overridden by @@ -442,7 +442,7 @@ of the CA and it is digitally signed using the CAs private key. This option is normally combined with the B<-req> option. Without the B<-req> option the input is a certificate which must be self signed. -=item B<-CAkey> I<filename> +=item B<-CAkey> I<filename>|I<uri> Sets the CA private key to sign a certificate with. If this option is not specified then it is assumed that the CA private key is present in |