diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2001-03-15 01:15:54 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2001-03-15 01:15:54 +0000 |
commit | 0a3ea5d34a4862160304dd6e4245f7aaab048e19 (patch) | |
tree | d1594350de5df77b0bef39fa5b1143573f1b5c7e /doc | |
parent | a5e4c0bb9e3cc8a03f3e0b1819d785f3321ed312 (diff) | |
download | openssl-0a3ea5d34a4862160304dd6e4245f7aaab048e19.tar.gz |
Document the -certopt option to the x509 utility.
Add no_issuer option.
Fix X509_print_ex() so it prints out newlines when
certain fields are omitted.
Diffstat (limited to 'doc')
-rw-r--r-- | doc/apps/x509.pod | 82 |
1 files changed, 81 insertions, 1 deletions
diff --git a/doc/apps/x509.pod b/doc/apps/x509.pod index 5a72f26554..dab9fa1333 100644 --- a/doc/apps/x509.pod +++ b/doc/apps/x509.pod @@ -113,6 +113,12 @@ prints out the certificate in text form. Full details are output including the public key, signature algorithms, issuer and subject names, serial number any extensions present and any trust settings. +=item B<-certopt option> + +customise the output format used with B<-text>. This option may be used more +than once to set multiple options. See the B<OUTPUT OPTIONS> section for +more information. + =item B<-noout> this option prevents output of the encoded version of the request. @@ -142,7 +148,7 @@ outputs the issuer name. =item B<-nameopt option> -option which determine how the subject or issuer names are displayed. This +option which determines how the subject or issuer names are displayed. This option may be used more than once to set multiple options. See the B<NAME OPTIONS> section for more information. @@ -486,6 +492,80 @@ name. =back +=head1 OUTPUT OPTIONS + +As well as customising the name output format, it is also possible to +customise the actual fields printed using the B<certopt> options when +the B<text> option is present. The default behaviour is to print all fields. + +=item B<compatible> + +use the old format. This is equivalent to specifying no output options at all. + +=item B<no_header> + +don't print header information: that is the lines saying "Certificate" and "Data". + +=item B<no_version> + +don't print out the version number. + +=item B<no_serial> + +don't print out the serial number. + +=item B<no_signame> + +don't print out the signature algorithm used. + +=item B<no_validity> + +don't print the validity, that is the B<notBefore> and B<notAfter> fields. + +=item B<no_subject> + +don't print out the subject name. + +=item B<no_issuer> + +don't print out the issuer name. + +=item B<no_pubkey> + +don't print out the public key. + +=item B<no_sigdump> + +don't give a hexadecimal dump of the certificate signature. + +=item B<no_aux> + +don't print out certificate trust information. + +=item B<no_extensions> + +don't print out any X509V3 extensions. + +=item B<ext_default> + +retain default extension behaviour: attempt to print out unsupported certificate extensions. + +=item B<ext_error> + +print an error message for unsupported certificate extensions. + +=item B<ext_parse> + +ASN1 parse unsupported extensions. + +=item B<ext_dump> + +hex dump unsupported extensions. + +=over 4 + +=back + =head1 EXAMPLES Note: in these examples the '\' means the example should be all on one |