From 4ad94864781f48b1a4b77f9cfb934622bf756ba1 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 17 Jun 2024 12:51:52 +0200 Subject: Adding upstream version 4.23.0. Signed-off-by: Daniel Baumann --- upstream/debian-unstable/man1/openssl-cms.1ssl | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) (limited to 'upstream/debian-unstable/man1/openssl-cms.1ssl') diff --git a/upstream/debian-unstable/man1/openssl-cms.1ssl b/upstream/debian-unstable/man1/openssl-cms.1ssl index 485f5660..c44be97b 100644 --- a/upstream/debian-unstable/man1/openssl-cms.1ssl +++ b/upstream/debian-unstable/man1/openssl-cms.1ssl @@ -55,7 +55,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL-CMS 1SSL" -.TH OPENSSL-CMS 1SSL 2024-02-03 3.1.5 OpenSSL +.TH OPENSSL-CMS 1SSL 2024-04-04 3.2.2-dev OpenSSL .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -82,6 +82,7 @@ Operation options: [\fB\-resign\fR] [\fB\-sign_receipt\fR] [\fB\-verify_receipt\fR \fIreceipt\fR] +[\fB\-digest\fR \fIdigest\fR] [\fB\-digest_create\fR] [\fB\-digest_verify\fR] [\fB\-compress\fR] @@ -280,6 +281,15 @@ similar to the \fB\-sign\fR operation. Verify a signed receipt in filename \fBreceipt\fR. The input message \fBmust\fR contain the original receipt request. Functionality is otherwise similar to the \fB\-verify\fR operation. +.IP "\fB\-digest\fR \fIdigest\fR" 4 +.IX Item "-digest digest" +When used with \fB\-sign\fR, provides the digest in hexadecimal form instead of +computing it from the original message content. Cannot be combined with \fB\-in\fR +or \fB\-nodetach\fR. +.Sp +This operation is the CMS equivalent of \fBopenssl\-pkeyutl\fR\|(1) signing. +When signing a pre-computed digest, the security relies on the digest and its +computation from the original message being trusted. .IP \fB\-digest_create\fR 4 .IX Item "-digest_create" Create a CMS \fBDigestedData\fR type. @@ -894,6 +904,8 @@ The \-no_alt_chains option was added in OpenSSL 1.0.2b. The \fB\-nameopt\fR option was added in OpenSSL 3.0.0. .PP The \fB\-engine\fR option was deprecated in OpenSSL 3.0. +.PP +The \fB\-digest\fR option was added in OpenSSL 3.2. .SH COPYRIGHT .IX Header "COPYRIGHT" Copyright 2008\-2023 The OpenSSL Project Authors. All Rights Reserved. -- cgit v1.2.3