ca.pod (59191) | ca.pod (68651) |
---|---|
1 2=pod 3 4=head1 NAME 5 6ca - sample minimal CA application 7 8=head1 SYNOPSIS --- 9 unchanged lines hidden (view full) --- 18[B<-crlexts section>] 19[B<-startdate date>] 20[B<-enddate date>] 21[B<-days arg>] 22[B<-md arg>] 23[B<-policy arg>] 24[B<-keyfile arg>] 25[B<-key arg>] | 1 2=pod 3 4=head1 NAME 5 6ca - sample minimal CA application 7 8=head1 SYNOPSIS --- 9 unchanged lines hidden (view full) --- 18[B<-crlexts section>] 19[B<-startdate date>] 20[B<-enddate date>] 21[B<-days arg>] 22[B<-md arg>] 23[B<-policy arg>] 24[B<-keyfile arg>] 25[B<-key arg>] |
26[B<-passin arg>] |
|
26[B<-cert file>] 27[B<-in file>] 28[B<-out file>] 29[B<-notext>] 30[B<-outdir dir>] 31[B<-infiles>] 32[B<-spkac file>] 33[B<-ss_cert file>] --- 60 unchanged lines hidden (view full) --- 94the private key to sign requests with. 95 96=item B<-key password> 97 98the password used to encrypt the private key. Since on some 99systems the command line arguments are visible (e.g. Unix with 100the 'ps' utility) this option should be used with caution. 101 | 27[B<-cert file>] 28[B<-in file>] 29[B<-out file>] 30[B<-notext>] 31[B<-outdir dir>] 32[B<-infiles>] 33[B<-spkac file>] 34[B<-ss_cert file>] --- 60 unchanged lines hidden (view full) --- 95the private key to sign requests with. 96 97=item B<-key password> 98 99the password used to encrypt the private key. Since on some 100systems the command line arguments are visible (e.g. Unix with 101the 'ps' utility) this option should be used with caution. 102 |
103=item B<-passin arg> 104 105the key password source. For more information about the format of B<arg> 106see the B<PASS PHRASE ARGUMENTS> section in L<openssl(1)|openssl(1)>. |
|
102=item B<-verbose> 103 104this prints extra details about the operations being performed. 105 106=item B<-notext> 107 108don't output the text form of a certificate to the output file. 109 --- 227 unchanged lines hidden (view full) --- 337created containing for example "01" and the empty index file 338demoCA/index.txt. 339 340 341Sign a certificate request: 342 343 openssl ca -in req.pem -out newcert.pem 344 | 107=item B<-verbose> 108 109this prints extra details about the operations being performed. 110 111=item B<-notext> 112 113don't output the text form of a certificate to the output file. 114 --- 227 unchanged lines hidden (view full) --- 342created containing for example "01" and the empty index file 343demoCA/index.txt. 344 345 346Sign a certificate request: 347 348 openssl ca -in req.pem -out newcert.pem 349 |
350Sign a certificate request, using CA extensions: 351 352 openssl ca -in req.pem -extensions v3_ca -out newcert.pem 353 |
|
345Generate a CRL 346 347 openssl ca -gencrl -out crl.pem 348 349Sign several requests: 350 351 openssl ca -infiles req1.pem req2.pem req3.pem 352 --- 127 unchanged lines hidden --- | 354Generate a CRL 355 356 openssl ca -gencrl -out crl.pem 357 358Sign several requests: 359 360 openssl ca -infiles req1.pem req2.pem req3.pem 361 --- 127 unchanged lines hidden --- |