diff options
author | Bodo Möller <bodo@openssl.org> | 2001-01-15 11:35:24 +0000 |
---|---|---|
committer | Bodo Möller <bodo@openssl.org> | 2001-01-15 11:35:24 +0000 |
commit | dfebac32c0a1611a42f1629b3dc50d31f8113396 (patch) | |
tree | d2ed07c278e0add5ab6b5a8312ad16bdef13702b /doc/apps | |
parent | ab5db00717b0ff2c5e583d645aa33bb46534f185 (diff) | |
download | openssl-dfebac32c0a1611a42f1629b3dc50d31f8113396.tar.gz |
New '-extfile' option for 'openssl ca'.
This allows keeping extensions in a separate configuration file.
Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
Diffstat (limited to 'doc/apps')
-rw-r--r-- | doc/apps/ca.pod | 14 |
1 files changed, 11 insertions, 3 deletions
diff --git a/doc/apps/ca.pod b/doc/apps/ca.pod index d352925864..8121886ebb 100644 --- a/doc/apps/ca.pod +++ b/doc/apps/ca.pod @@ -36,6 +36,7 @@ B<openssl> B<ca> [B<-batch>] [B<-msie_hack>] [B<-extensions section>] +[B<-extfile section>] =head1 DESCRIPTION @@ -162,9 +163,16 @@ and all certificates will be certified automatically. =item B<-extensions section> the section of the configuration file containing certificate extensions -to be added when a certificate is issued. If no extension section is -present then a V1 certificate is created. If the extension section -is present (even if it is empty) then a V3 certificate is created. +to be added when a certificate is issued (defaults to B<x509_extensions> +unless the B<-extfile> option is used). If no extension section is +present then, a V1 certificate is created. If the extension section +is present (even if it is empty), then a V3 certificate is created. + +=item B<-extfile file> + +an additional configuration file to read certificate extensions from +(using the default section unless the B<-extensions> option is also +used). =back |