diff options
Diffstat (limited to 'upstream/archlinux/man1/openssl-x509.1ssl')
| -rw-r--r-- | upstream/archlinux/man1/openssl-x509.1ssl | 25 |
1 files changed, 18 insertions, 7 deletions
diff --git a/upstream/archlinux/man1/openssl-x509.1ssl b/upstream/archlinux/man1/openssl-x509.1ssl index 5300cb99..fdd2065f 100644 --- a/upstream/archlinux/man1/openssl-x509.1ssl +++ b/upstream/archlinux/man1/openssl-x509.1ssl @@ -55,7 +55,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL-X509 1ssl" -.TH OPENSSL-X509 1ssl 2024-01-30 3.2.1 OpenSSL +.TH OPENSSL-X509 1ssl 2024-04-28 3.3.0 OpenSSL .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -113,6 +113,8 @@ openssl\-x509 \- Certificate display and signing command [\fB\-next_serial\fR] [\fB\-days\fR \fIarg\fR] [\fB\-preserve_dates\fR] +[\fB\-set_issuer\fR \fIarg\fR] +[\fB\-set_subject\fR \fIarg\fR] [\fB\-subj\fR \fIarg\fR] [\fB\-force_pubkey\fR \fIfilename\fR] [\fB\-clrext\fR] @@ -177,7 +179,7 @@ see \fBopenssl\-passphrase\-options\fR\|(1). Generate a certificate from scratch, not using an input certificate or certificate request. So this excludes the \fB\-in\fR and \fB\-req\fR options. -Instead, the \fB\-subj\fR option needs to be given. +Instead, the \fB\-set_subject\fR option needs to be given. The public key to include can be given with the \fB\-force_pubkey\fR option and defaults to the key given with the \fB\-key\fR (or \fB\-signkey\fR) option, which implies self-signature. @@ -385,10 +387,16 @@ Cannot be used together with the \fB\-preserve_dates\fR option. When signing a certificate, preserve "notBefore" and "notAfter" dates of any input certificate instead of adjusting them to current time and duration. Cannot be used together with the \fB\-days\fR option. -.IP "\fB\-subj\fR \fIarg\fR" 4 -.IX Item "-subj arg" +.IP "\fB\-set_issuer\fR \fIarg\fR" 4 +.IX Item "-set_issuer arg" +When a certificate is created set its issuer name to the given value. +.Sp +See \fB\-set_subject\fR on how the arg must be formatted. +.IP "\fB\-set_subject\fR \fIarg\fR" 4 +.IX Item "-set_subject arg" When a certificate is created set its subject name to the given value. -When the certificate is self-signed the issuer name is set to the same value. +When the certificate is self-signed the issuer name is set to the same value, +unless the \fB\-set_issuer\fR option is given. .Sp The arg must be formatted as \f(CW\*(C`/type0=value0/type1=value1/type2=...\*(C'\fR. Special characters may be escaped by \f(CW\*(C`\e\*(C'\fR (backslash), whitespace is retained. @@ -403,6 +411,9 @@ Example: .Sp This option can be used with the \fB\-new\fR and \fB\-force_pubkey\fR options to create a new certificate without providing an input certificate or certificate request. +.IP "\fB\-subj\fR \fIarg\fR" 4 +.IX Item "-subj arg" +This option is an alias of \fB\-set_subject\fR. .IP "\fB\-force_pubkey\fR \fIfilename\fR" 4 .IX Item "-force_pubkey filename" When a new certificate or certificate request is created @@ -411,7 +422,7 @@ instead of the key contained in the input or given with the \fB\-key\fR (or \fB\-signkey\fR) option. If the input contains no public key but a private key, its public part is used. .Sp -This option can be used in conjunction with b<\-new> and \fB\-subj\fR +This option can be used in conjunction with b<\-new> and \fB\-set_subject\fR to directly generate a certificate containing any desired public key. .Sp This option is also useful for creating self-issued certificates that are not @@ -769,7 +780,7 @@ Since OpenSSL 3.2, generated certificates bear X.509 version 3, and key identifier extensions are included by default. .SH COPYRIGHT .IX Header "COPYRIGHT" -Copyright 2000\-2023 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2024 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy |