Deleted Added
full compact
ca.pod (59191) ca.pod (68651)
1
2=pod
3
4=head1 NAME
5
6ca - sample minimal CA application
7
8=head1 SYNOPSIS

--- 9 unchanged lines hidden (view full) ---

18[B<-crlexts section>]
19[B<-startdate date>]
20[B<-enddate date>]
21[B<-days arg>]
22[B<-md arg>]
23[B<-policy arg>]
24[B<-keyfile arg>]
25[B<-key arg>]
1
2=pod
3
4=head1 NAME
5
6ca - sample minimal CA application
7
8=head1 SYNOPSIS

--- 9 unchanged lines hidden (view full) ---

18[B<-crlexts section>]
19[B<-startdate date>]
20[B<-enddate date>]
21[B<-days arg>]
22[B<-md arg>]
23[B<-policy arg>]
24[B<-keyfile arg>]
25[B<-key arg>]
26[B<-passin arg>]
26[B<-cert file>]
27[B<-in file>]
28[B<-out file>]
29[B<-notext>]
30[B<-outdir dir>]
31[B<-infiles>]
32[B<-spkac file>]
33[B<-ss_cert file>]

--- 60 unchanged lines hidden (view full) ---

94the private key to sign requests with.
95
96=item B<-key password>
97
98the password used to encrypt the private key. Since on some
99systems the command line arguments are visible (e.g. Unix with
100the 'ps' utility) this option should be used with caution.
101
27[B<-cert file>]
28[B<-in file>]
29[B<-out file>]
30[B<-notext>]
31[B<-outdir dir>]
32[B<-infiles>]
33[B<-spkac file>]
34[B<-ss_cert file>]

--- 60 unchanged lines hidden (view full) ---

95the private key to sign requests with.
96
97=item B<-key password>
98
99the password used to encrypt the private key. Since on some
100systems the command line arguments are visible (e.g. Unix with
101the 'ps' utility) this option should be used with caution.
102
103=item B<-passin arg>
104
105the key password source. For more information about the format of B<arg>
106see the B<PASS PHRASE ARGUMENTS> section in L<openssl(1)|openssl(1)>.
102=item B<-verbose>
103
104this prints extra details about the operations being performed.
105
106=item B<-notext>
107
108don't output the text form of a certificate to the output file.
109

--- 227 unchanged lines hidden (view full) ---

337created containing for example "01" and the empty index file
338demoCA/index.txt.
339
340
341Sign a certificate request:
342
343 openssl ca -in req.pem -out newcert.pem
344
107=item B<-verbose>
108
109this prints extra details about the operations being performed.
110
111=item B<-notext>
112
113don't output the text form of a certificate to the output file.
114

--- 227 unchanged lines hidden (view full) ---

342created containing for example "01" and the empty index file
343demoCA/index.txt.
344
345
346Sign a certificate request:
347
348 openssl ca -in req.pem -out newcert.pem
349
350Sign a certificate request, using CA extensions:
351
352 openssl ca -in req.pem -extensions v3_ca -out newcert.pem
353
345Generate a CRL
346
347 openssl ca -gencrl -out crl.pem
348
349Sign several requests:
350
351 openssl ca -infiles req1.pem req2.pem req3.pem
352

--- 127 unchanged lines hidden ---
354Generate a CRL
355
356 openssl ca -gencrl -out crl.pem
357
358Sign several requests:
359
360 openssl ca -infiles req1.pem req2.pem req3.pem
361

--- 127 unchanged lines hidden ---