summaryrefslogtreecommitdiffstats
path: root/upstream/debian-unstable/man1/openssl-cms.1ssl
diff options
context:
space:
mode:
Diffstat (limited to 'upstream/debian-unstable/man1/openssl-cms.1ssl')
-rw-r--r--upstream/debian-unstable/man1/openssl-cms.1ssl14
1 files changed, 13 insertions, 1 deletions
diff --git a/upstream/debian-unstable/man1/openssl-cms.1ssl b/upstream/debian-unstable/man1/openssl-cms.1ssl
index 485f5660..c44be97b 100644
--- a/upstream/debian-unstable/man1/openssl-cms.1ssl
+++ b/upstream/debian-unstable/man1/openssl-cms.1ssl
@@ -55,7 +55,7 @@
.\" ========================================================================
.\"
.IX Title "OPENSSL-CMS 1SSL"
-.TH OPENSSL-CMS 1SSL 2024-02-03 3.1.5 OpenSSL
+.TH OPENSSL-CMS 1SSL 2024-04-04 3.2.2-dev OpenSSL
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
@@ -82,6 +82,7 @@ Operation options:
[\fB\-resign\fR]
[\fB\-sign_receipt\fR]
[\fB\-verify_receipt\fR \fIreceipt\fR]
+[\fB\-digest\fR \fIdigest\fR]
[\fB\-digest_create\fR]
[\fB\-digest_verify\fR]
[\fB\-compress\fR]
@@ -280,6 +281,15 @@ similar to the \fB\-sign\fR operation.
Verify a signed receipt in filename \fBreceipt\fR. The input message \fBmust\fR
contain the original receipt request. Functionality is otherwise similar
to the \fB\-verify\fR operation.
+.IP "\fB\-digest\fR \fIdigest\fR" 4
+.IX Item "-digest digest"
+When used with \fB\-sign\fR, provides the digest in hexadecimal form instead of
+computing it from the original message content. Cannot be combined with \fB\-in\fR
+or \fB\-nodetach\fR.
+.Sp
+This operation is the CMS equivalent of \fBopenssl\-pkeyutl\fR\|(1) signing.
+When signing a pre-computed digest, the security relies on the digest and its
+computation from the original message being trusted.
.IP \fB\-digest_create\fR 4
.IX Item "-digest_create"
Create a CMS \fBDigestedData\fR type.
@@ -894,6 +904,8 @@ The \-no_alt_chains option was added in OpenSSL 1.0.2b.
The \fB\-nameopt\fR option was added in OpenSSL 3.0.0.
.PP
The \fB\-engine\fR option was deprecated in OpenSSL 3.0.
+.PP
+The \fB\-digest\fR option was added in OpenSSL 3.2.
.SH COPYRIGHT
.IX Header "COPYRIGHT"
Copyright 2008\-2023 The OpenSSL Project Authors. All Rights Reserved.