diff options
author | Rich Salz <rsalz@openssl.org> | 2017-05-20 21:44:31 -0400 |
---|---|---|
committer | Rich Salz <rsalz@openssl.org> | 2017-05-21 17:20:31 -0400 |
commit | 48b5352212d8c68f7fd071ca9f38822b7e954c5a (patch) | |
tree | 0d85f3a02545caa8ddd9b4ef4268942ce36775f5 /doc/man1 | |
parent | c80bbcbf99fa3bf7954b2ff7aa2168c3f51f3ade (diff) | |
download | openssl-48b5352212d8c68f7fd071ca9f38822b7e954c5a.tar.gz |
-inkey can be an identifier, not just a file
update pkcs12, smime, ts apps.
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3507)
Diffstat (limited to 'doc/man1')
-rw-r--r-- | doc/man1/pkcs12.pod | 6 | ||||
-rw-r--r-- | doc/man1/smime.pod | 6 | ||||
-rw-r--r-- | doc/man1/ts.pod | 6 |
3 files changed, 12 insertions, 6 deletions
diff --git a/doc/man1/pkcs12.pod b/doc/man1/pkcs12.pod index 80373f2034..a40ae7f04f 100644 --- a/doc/man1/pkcs12.pod +++ b/doc/man1/pkcs12.pod @@ -10,7 +10,7 @@ B<openssl> B<pkcs12> [B<-help>] [B<-export>] [B<-chain>] -[B<-inkey filename>] +[B<-inkey file_or_id>] [B<-certfile filename>] [B<-name name>] [B<-caname name>] @@ -177,10 +177,12 @@ default. They must all be in PEM format. The order doesn't matter but one private key and its corresponding certificate should be present. If additional certificates are present they will also be included in the PKCS#12 file. -=item B<-inkey filename> +=item B<-inkey file_or_id> File to read private key from. If not present then a private key must be present in the input file. +If no engine is used, the argument is taken as a file; if an engine is +specified, the argument is given to the engine as a key identifier. =item B<-name friendlyname> diff --git a/doc/man1/smime.pod b/doc/man1/smime.pod index 7cae26fa84..7df780f5e0 100644 --- a/doc/man1/smime.pod +++ b/doc/man1/smime.pod @@ -54,7 +54,7 @@ B<openssl> B<smime> [B<-recip file>] [B<-inform SMIME|PEM|DER>] [B<-passin arg>] -[B<-inkey file>] +[B<-inkey file_or_id>] [B<-out file>] [B<-outform SMIME|PEM|DER>] [B<-content file>] @@ -280,13 +280,15 @@ verification was successful. The recipients certificate when decrypting a message. This certificate must match one of the recipients of the message or an error occurs. -=item B<-inkey file> +=item B<-inkey file_or_id> The private key to use when signing or decrypting. This must match the corresponding certificate. If this option is not specified then the private key must be included in the certificate file specified with the B<-recip> or B<-signer> file. When signing this option can be used multiple times to specify successive keys. +If no engine is used, the argument is taken as a file; if an engine is +specified, the argument is given to the engine as a key identifier. =item B<-passin arg> diff --git a/doc/man1/ts.pod b/doc/man1/ts.pod index d469b23196..c04a623785 100644 --- a/doc/man1/ts.pod +++ b/doc/man1/ts.pod @@ -27,7 +27,7 @@ B<-reply> [B<-queryfile> request.tsq] [B<-passin> password_src] [B<-signer> tsa_cert.pem] -[B<-inkey> private.pem] +[B<-inkey> file_or_id] [B<-sha1|-sha224|-sha256|-sha384|-sha512>] [B<-chain> certs_file.pem] [B<-tspolicy> object_id] @@ -243,10 +243,12 @@ timeStamping. The extended key usage must also be critical, otherwise the certificate is going to be refused. Overrides the B<signer_cert> variable of the config file. (Optional) -=item B<-inkey> private.pem +=item B<-inkey> file_or_id The signer private key of the TSA in PEM format. Overrides the B<signer_key> config file option. (Optional) +If no engine is used, the argument is taken as a file; if an engine is +specified, the argument is given to the engine as a key identifier. =item B<-sha1|-sha224|-sha256|-sha384|-sha512> |