forked from cory/tildefriends
Whoa. Apps are running on android. Switched to a static build of OpenSSL 1.1.1t for simplicity.
git-svn-id: https://www.unprompted.com/svn/projects/tildefriends/trunk@4211 ed5197a5-7fde-0310-b194-c3ffbd925b24
This commit is contained in:
@ -92,7 +92,7 @@
|
||||
<dt id="signCA"><b>-signCA</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>This option is the same as the <b>-signreq</b> option except it uses the configuration file section <b>v3_ca</b> and so makes the signed request a valid CA certificate. This is useful when creating intermediate CA from a root CA. Extra params are passed on to <b>openssl ca</b> command.</p>
|
||||
<p>This option is the same as the <b>-sign</b> option except it uses the configuration file section <b>v3_ca</b> and so makes the signed request a valid CA certificate. This is useful when creating intermediate CA from a root CA. Extra params are passed on to <b>openssl ca</b> command.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="signcert"><b>-signcert</b></dt>
|
||||
@ -137,7 +137,7 @@
|
||||
|
||||
<pre><code>CA.pl -newca
|
||||
CA.pl -newreq
|
||||
CA.pl -signreq
|
||||
CA.pl -sign
|
||||
CA.pl -pkcs12 "My Test Certificate"</code></pre>
|
||||
|
||||
<h1 id="DSA-CERTIFICATES">DSA CERTIFICATES</h1>
|
||||
@ -156,7 +156,7 @@ CA.pl -pkcs12 "My Test Certificate"</code></pre>
|
||||
|
||||
<pre><code>CA.pl -newca</code></pre>
|
||||
|
||||
<p>enter cacert.pem when prompted for the CA file name.</p>
|
||||
<p>enter cacert.pem when prompted for the CA filename.</p>
|
||||
|
||||
<p>Create a DSA certificate request and private key (a different set of parameters can optionally be created first):</p>
|
||||
|
||||
@ -164,7 +164,7 @@ CA.pl -pkcs12 "My Test Certificate"</code></pre>
|
||||
|
||||
<p>Sign the request:</p>
|
||||
|
||||
<pre><code>CA.pl -signreq</code></pre>
|
||||
<pre><code>CA.pl -sign</code></pre>
|
||||
|
||||
<h1 id="NOTES">NOTES</h1>
|
||||
|
||||
@ -186,7 +186,7 @@ CA.pl -pkcs12 "My Test Certificate"</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/c_rehash.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/c_rehash.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rehash.html
|
@ -149,7 +149,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="notext"><b>-notext</b></dt>
|
||||
@ -203,7 +203,7 @@
|
||||
<dt id="noemailDN"><b>-noemailDN</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The DN of a certificate can contain the EMAIL field if present in the request DN, however it is good policy just having the e-mail set into the altName extension of the certificate. When this option is set the EMAIL field is removed from the certificate' subject and set only in the, eventually present, extensions. The <b>email_in_dn</b> keyword can be used in the configuration file to enable this behaviour.</p>
|
||||
<p>The DN of a certificate can contain the EMAIL field if present in the request DN, however, it is good policy just having the e-mail set into the altName extension of the certificate. When this option is set the EMAIL field is removed from the certificate' subject and set only in the, eventually present, extensions. The <b>email_in_dn</b> keyword can be used in the configuration file to enable this behaviour.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="batch"><b>-batch</b></dt>
|
||||
@ -659,7 +659,7 @@ emailAddress = optional</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -396,7 +396,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="rand-file"><b>-rand file...</b></dt>
|
||||
@ -610,6 +610,8 @@
|
||||
|
||||
<p>No revocation checking is done on the signer's certificate.</p>
|
||||
|
||||
<p>The <b>-binary</b> option does not work correctly when processing text input which (contrary to the S/MIME specification) uses LF rather than CRLF line endings.</p>
|
||||
|
||||
<h1 id="HISTORY">HISTORY</h1>
|
||||
|
||||
<p>The use of multiple <b>-signer</b> options and the <b>-resign</b> command were first added in OpenSSL 1.0.0.</p>
|
||||
@ -624,7 +626,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2008-2022 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -71,7 +71,7 @@
|
||||
<dt id="certfile-filename"><b>-certfile filename</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Specifies a filename containing one or more certificates in <b>PEM</b> format. All certificates in the file will be added to the PKCS#7 structure. This option can be used more than once to read certificates form multiple files.</p>
|
||||
<p>Specifies a filename containing one or more certificates in <b>PEM</b> format. All certificates in the file will be added to the PKCS#7 structure. This option can be used more than once to read certificates from multiple files.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="nocrl"><b>-nocrl</b></dt>
|
||||
@ -107,7 +107,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -99,7 +99,7 @@
|
||||
<dt id="sign-filename"><b>-sign filename</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Digitally sign the digest using the private key in "filename". Note this option does not support Ed25519 or Ed448 private keys. Use the <b>pkeyutl</b> command instead for this.</p>
|
||||
<p>Digitally sign the digest using the private key in "filename". Note this option does not support Ed25519 or Ed448 private keys.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="keyform-arg"><b>-keyform arg</b></dt>
|
||||
@ -117,7 +117,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="verify-filename"><b>-verify filename</b></dt>
|
||||
@ -238,7 +238,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -67,7 +67,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -79,7 +79,7 @@
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="aes128--aes192--aes256--aria128--aria192--aria256--camellia128--camellia192--camellia256--des--des3--idea"><b>-aes128</b>, <b>-aes192</b>, <b>-aes256</b>, <b>-aria128</b>, <b>-aria192</b>, <b>-aria256</b>, <b>-camellia128</b>, <b>-camellia192</b>, <b>-camellia256</b>, <b>-des</b>, <b>-des3</b>, <b>-idea</b></dt>
|
||||
@ -166,7 +166,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -65,7 +65,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -77,7 +77,7 @@
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="des--des3--idea"><b>-des|-des3|-idea</b></dt>
|
||||
@ -186,7 +186,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2003-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2003-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -75,7 +75,7 @@
|
||||
<dt id="pass-arg"><b>-pass arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="e"><b>-e</b></dt>
|
||||
@ -201,7 +201,7 @@
|
||||
<dt id="z"><b>-z</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Compress or decompress clear text using zlib before encryption or after decryption. This option exists only if OpenSSL with compiled with zlib or zlib-dynamic option.</p>
|
||||
<p>Compress or decompress encrypted data using zlib after encryption or before decryption. This option exists only if OpenSSL was compiled with the zlib or zlib-dynamic option.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="none"><b>-none</b></dt>
|
||||
@ -240,7 +240,7 @@
|
||||
|
||||
<p>Some of the ciphers do not have large keys and others have security implications if not used correctly. A beginner is advised to just use a strong block cipher, such as AES, in CBC mode.</p>
|
||||
|
||||
<p>All the block ciphers normally use PKCS#5 padding, also known as standard block padding. This allows a rudimentary integrity or password check to be performed. However since the chance of random data passing the test is better than 1 in 256 it isn't a very good test.</p>
|
||||
<p>All the block ciphers normally use PKCS#5 padding, also known as standard block padding. This allows a rudimentary integrity or password check to be performed. However, since the chance of random data passing the test is better than 1 in 256 it isn't a very good test.</p>
|
||||
|
||||
<p>If padding is disabled then the input data must be a multiple of the cipher block length.</p>
|
||||
|
||||
@ -400,7 +400,7 @@ camellia-[128|192|256]-ofb 128/192/256 bit Camellia in OFB mode</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -73,7 +73,7 @@
|
||||
<dt id="pass-arg"><b>-pass arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="cipher"><b>-<i>cipher</i></b></dt>
|
||||
@ -351,7 +351,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2006-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -52,7 +52,7 @@
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="aes128--aes192--aes256--aria128--aria192--aria256--camellia128--camellia192--camellia256--des--des3--idea"><b>-aes128</b>, <b>-aes192</b>, <b>-aes256</b>, <b>-aria128</b>, <b>-aria192</b>, <b>-aria256</b>, <b>-camellia128</b>, <b>-camellia192</b>, <b>-camellia256</b>, <b>-des</b>, <b>-des3</b>, <b>-idea</b></dt>
|
||||
@ -111,7 +111,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -125,7 +125,7 @@
|
||||
<dt id="host-hostname:port--path-pathname"><b>-host hostname:port</b>, <b>-path pathname</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>If the <b>host</b> option is present then the OCSP request is sent to the host <b>hostname</b> on port <b>port</b>. <b>path</b> specifies the HTTP path name to use or "/" by default. This is equivalent to specifying <b>-url</b> with scheme http:// and the given hostname, port, and pathname.</p>
|
||||
<p>If the <b>host</b> option is present then the OCSP request is sent to the host <b>hostname</b> on port <b>port</b>. <b>path</b> specifies the HTTP pathname to use or "/" by default. This is equivalent to specifying <b>-url</b> with scheme http:// and the given hostname, port, and pathname.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="header-name-value"><b>-header name=value</b></dt>
|
||||
@ -403,7 +403,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-asn1parse.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-asn1parse.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
asn1parse.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-c_rehash.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-c_rehash.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rehash.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ca.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ca.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ca.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ciphers.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ciphers.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ciphers.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-cms.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-cms.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
cms.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-crl.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-crl.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
crl.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-crl2pkcs7.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-crl2pkcs7.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
crl2pkcs7.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dgst.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dgst.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
dgst.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dhparam.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dhparam.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
dhparam.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dsa.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dsa.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
dsa.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dsaparam.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-dsaparam.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
dsaparam.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ec.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ec.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ec.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ecparam.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ecparam.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ecparam.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-enc.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-enc.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
enc.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-engine.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-engine.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
engine.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-errstr.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-errstr.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
errstr.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-gendsa.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-gendsa.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
gendsa.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-genpkey.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-genpkey.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
genpkey.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-genrsa.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-genrsa.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
genrsa.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-list.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-list.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
list.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-nseq.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-nseq.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
nseq.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ocsp.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ocsp.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ocsp.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-passwd.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-passwd.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
passwd.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs12.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs12.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkcs12.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs7.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs7.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkcs7.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs8.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkcs8.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkcs8.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkey.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkey.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkey.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkeyparam.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkeyparam.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkeyparam.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkeyutl.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-pkeyutl.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
pkeyutl.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-prime.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-prime.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
prime.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rand.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rand.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rand.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rehash.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rehash.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rehash.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-req.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-req.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
req.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rsa.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rsa.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rsa.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rsautl.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-rsautl.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
rsautl.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_client.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_client.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
s_client.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_server.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_server.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
s_server.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_time.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-s_time.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
s_time.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-sess_id.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-sess_id.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
sess_id.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-smime.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-smime.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
smime.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-speed.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-speed.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
speed.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-spkac.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-spkac.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
spkac.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-srp.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-srp.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
srp.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-storeutl.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-storeutl.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
storeutl.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ts.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-ts.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ts.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-tsget.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-tsget.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
tsget.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-verify.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-verify.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
verify.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-version.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-version.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
version.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-x509.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man1/openssl-x509.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
x509.html
|
@ -30,7 +30,7 @@
|
||||
|
||||
<h1 id="DESCRIPTION">DESCRIPTION</h1>
|
||||
|
||||
<p>The <b>passwd</b> command computes the hash of a password typed at run-time or the hash of each password in a list. The password list is taken from the named file for option <b>-in file</b>, from stdin for option <b>-stdin</b>, or from the command line, or from the terminal otherwise. The Unix standard algorithm <b>crypt</b> and the MD5-based BSD password algorithm <b>1</b>, its Apache variant <b>apr1</b>, and its AIX variant are available.</p>
|
||||
<p>The <b>passwd</b> command computes the hash of a password typed at run-time or the hash of each password in a list. The password list is taken from the named file for option <b>-in file</b>, from stdin for option <b>-stdin</b>, or from the command line, or from the terminal otherwise.</p>
|
||||
|
||||
<h1 id="OPTIONS">OPTIONS</h1>
|
||||
|
||||
@ -142,7 +142,7 @@ xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -65,13 +65,13 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The PKCS#12 file (i.e. input file) password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The PKCS#12 file (i.e. input file) password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Pass phrase source to encrypt any outputted private keys with. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>Pass phrase source to encrypt any outputted private keys with. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="password-arg"><b>-password arg</b></dt>
|
||||
@ -221,13 +221,13 @@
|
||||
<dt id="pass-arg--passout-arg"><b>-pass arg</b>, <b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The PKCS#12 file (i.e. output file) password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The PKCS#12 file (i.e. output file) password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="passin-password"><b>-passin password</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Pass phrase source to decrypt any input private keys with. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>Pass phrase source to decrypt any input private keys with. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="chain"><b>-chain</b></dt>
|
||||
@ -251,7 +251,7 @@
|
||||
<dt id="keyex--keysig"><b>-keyex|-keysig</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Specifies that the private key is to be used for key exchange or just signing. This option is only interpreted by MSIE and similar MS software. Normally "export grade" software will only allow 512 bit RSA keys to be used for encryption purposes but arbitrary length keys for signing. The <b>-keysig</b> option marks the key for signing only. Signing only keys can be used for S/MIME signing, authenticode (ActiveX control signing) and SSL client authentication, however due to a bug only MSIE 5.0 and later support the use of signing only keys for SSL client authentication.</p>
|
||||
<p>Specifies that the private key is to be used for key exchange or just signing. This option is only interpreted by MSIE and similar MS software. Normally "export grade" software will only allow 512 bit RSA keys to be used for encryption purposes but arbitrary length keys for signing. The <b>-keysig</b> option marks the key for signing only. Signing only keys can be used for S/MIME signing, authenticode (ActiveX control signing) and SSL client authentication, however, due to a bug only MSIE 5.0 and later support the use of signing only keys for SSL client authentication.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="macalg-digest"><b>-macalg digest</b></dt>
|
||||
@ -367,7 +367,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -82,7 +82,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -94,7 +94,7 @@
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="iter-count"><b>-iter count</b></dt>
|
||||
@ -261,7 +261,7 @@
|
||||
|
||||
<h1 id="STANDARDS">STANDARDS</h1>
|
||||
|
||||
<p>Test vectors from this PKCS#5 v2.0 implementation were posted to the pkcs-tng mailing list using triple DES, DES and RC2 with high iteration counts, several people confirmed that they could decrypt the private keys produced and Therefore it can be assumed that the PKCS#5 v2.0 implementation is reasonably accurate at least as far as these algorithms are concerned.</p>
|
||||
<p>Test vectors from this PKCS#5 v2.0 implementation were posted to the pkcs-tng mailing list using triple DES, DES and RC2 with high iteration counts, several people confirmed that they could decrypt the private keys produced and therefore, it can be assumed that the PKCS#5 v2.0 implementation is reasonably accurate at least as far as these algorithms are concerned.</p>
|
||||
|
||||
<p>The format of PKCS#8 DSA (and other) private keys is not well documented: it is hidden away in PKCS#11 v2.01, section 11.9. OpenSSL's default DSA PKCS#8 private key format complies with this standard.</p>
|
||||
|
||||
@ -279,7 +279,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -64,7 +64,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -76,7 +76,7 @@
|
||||
<dt id="passout-password"><b>-passout password</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="traditional"><b>-traditional</b></dt>
|
||||
@ -173,7 +173,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -38,7 +38,7 @@
|
||||
|
||||
<h1 id="DESCRIPTION">DESCRIPTION</h1>
|
||||
|
||||
<p>The <b>pkeyutl</b> command can be used to perform low level public key operations using any supported algorithm.</p>
|
||||
<p>The <b>pkeyutl</b> command can be used to perform low-level public key operations using any supported algorithm.</p>
|
||||
|
||||
<h1 id="OPTIONS">OPTIONS</h1>
|
||||
|
||||
@ -83,7 +83,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="peerkey-file"><b>-peerkey file</b></dt>
|
||||
@ -251,6 +251,12 @@
|
||||
|
||||
<p>For PSS and OAEP padding sets the MGF1 digest. If the MGF1 digest is not explicitly set in PSS mode then the signing digest is used.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="rsa_oaep_md:digest"><b>rsa_oaep_md:</b><i>digest</i></dt>
|
||||
<dd>
|
||||
|
||||
<p>Sets the digest used for the OAEP hash function. If not explicitly set then SHA1 is used.</p>
|
||||
|
||||
</dd>
|
||||
</dl>
|
||||
|
||||
@ -313,13 +319,18 @@
|
||||
<pre><code>openssl pkeyutl -kdf TLS1-PRF -kdflen 48 -pkeyopt md:SHA256 \
|
||||
-pkeyopt hexsecret:ff -pkeyopt hexseed:ff -hexdump</code></pre>
|
||||
|
||||
<p>Decrypt some data using a private key with OAEP padding using SHA256:</p>
|
||||
|
||||
<pre><code>openssl pkeyutl -decrypt -in file -inkey key.pem -out secret \
|
||||
-pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_md:sha256</code></pre>
|
||||
|
||||
<h1 id="SEE-ALSO">SEE ALSO</h1>
|
||||
|
||||
<p><a href="../man1/genpkey.html">genpkey(1)</a>, <a href="../man1/pkey.html">pkey(1)</a>, <a href="../man1/rsautl.html">rsautl(1)</a> <a href="../man1/dgst.html">dgst(1)</a>, <a href="../man1/rsa.html">rsa(1)</a>, <a href="../man1/genrsa.html">genrsa(1)</a>, <a href="../man3/EVP_PKEY_CTX_set_hkdf_md.html">EVP_PKEY_CTX_set_hkdf_md(3)</a>, <a href="../man3/EVP_PKEY_CTX_set_tls1_prf_md.html">EVP_PKEY_CTX_set_tls1_prf_md(3)</a></p>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2006-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -75,7 +75,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -87,7 +87,7 @@
|
||||
<dt id="passout-arg"><b>-passout arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="text"><b>-text</b></dt>
|
||||
@ -600,7 +600,7 @@ problems making Certificate Request</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -66,7 +66,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-filename"><b>-out filename</b></dt>
|
||||
@ -78,7 +78,7 @@
|
||||
<dt id="passout-password"><b>-passout password</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The output file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="aes128--aes192--aes256--aria128--aria192--aria256--camellia128--camellia192--camellia256--des--des3--idea"><b>-aes128</b>, <b>-aes192</b>, <b>-aes256</b>, <b>-aria128</b>, <b>-aria192</b>, <b>-aria256</b>, <b>-camellia128</b>, <b>-camellia192</b>, <b>-camellia256</b>, <b>-des</b>, <b>-des3</b>, <b>-idea</b></dt>
|
||||
@ -190,7 +190,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -157,7 +157,7 @@
|
||||
<dt id="pass-arg"><b>-pass arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>the private key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>the private key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="verify-depth"><b>-verify depth</b></dt>
|
||||
@ -310,13 +310,13 @@ DANE TLSA 2 1 1 ...ee12d2cc90180517616e8a18 matched TA certificate at depth 1
|
||||
<dt id="nbio_test"><b>-nbio_test</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Tests non-blocking I/O</p>
|
||||
<p>Tests nonblocking I/O</p>
|
||||
|
||||
</dd>
|
||||
<dt id="nbio"><b>-nbio</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Turns on non-blocking I/O</p>
|
||||
<p>Turns on nonblocking I/O</p>
|
||||
|
||||
</dd>
|
||||
<dt id="crlf"><b>-crlf</b></dt>
|
||||
@ -643,13 +643,13 @@ DANE TLSA 2 1 1 ...ee12d2cc90180517616e8a18 matched TA certificate at depth 1
|
||||
|
||||
<p>If the handshake fails then there are several possible causes, if it is nothing obvious like no client certificate then the <b>-bugs</b>, <b>-ssl3</b>, <b>-tls1</b>, <b>-no_ssl3</b>, <b>-no_tls1</b> options can be tried in case it is a buggy server. In particular you should play with these options <b>before</b> submitting a bug report to an OpenSSL mailing list.</p>
|
||||
|
||||
<p>A frequent problem when attempting to get client certificates working is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its "acceptable CA list" when it requests a certificate. By using <b>s_client</b> the CA list can be viewed and checked. However some servers only request client authentication after a specific URL is requested. To obtain the list in this case it is necessary to use the <b>-prexit</b> option and send an HTTP request for an appropriate page.</p>
|
||||
<p>A frequent problem when attempting to get client certificates working is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its "acceptable CA list" when it requests a certificate. By using <b>s_client</b> the CA list can be viewed and checked. However, some servers only request client authentication after a specific URL is requested. To obtain the list in this case it is necessary to use the <b>-prexit</b> option and send an HTTP request for an appropriate page.</p>
|
||||
|
||||
<p>If a certificate is specified on the command line using the <b>-cert</b> option it will not be used unless the server specifically requests a client certificate. Therefor merely including a client certificate on the command line is no guarantee that the certificate works.</p>
|
||||
<p>If a certificate is specified on the command line using the <b>-cert</b> option it will not be used unless the server specifically requests a client certificate. Therefore, merely including a client certificate on the command line is no guarantee that the certificate works.</p>
|
||||
|
||||
<p>If there are problems verifying a server certificate then the <b>-showcerts</b> option can be used to show all the certificates sent by the server.</p>
|
||||
|
||||
<p>The <b>s_client</b> utility is a test tool and is designed to continue the handshake after any certificate verification errors. As a result it will accept any certificate chain (trusted or not) sent by the peer. None test applications should <b>not</b> do this as it makes them vulnerable to a MITM attack. This behaviour can be changed by with the <b>-verify_return_error</b> option: any verify errors are then returned aborting the handshake.</p>
|
||||
<p>The <b>s_client</b> utility is a test tool and is designed to continue the handshake after any certificate verification errors. As a result it will accept any certificate chain (trusted or not) sent by the peer. Non-test applications should <b>not</b> do this as it makes them vulnerable to a MITM attack. This behaviour can be changed by with the <b>-verify_return_error</b> option: any verify errors are then returned aborting the handshake.</p>
|
||||
|
||||
<p>The <b>-bind</b> option may be useful if the server or a firewall requires connections to come from some particular address and or port.</p>
|
||||
|
||||
@ -669,7 +669,7 @@ DANE TLSA 2 1 1 ...ee12d2cc90180517616e8a18 matched TA certificate at depth 1
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -155,7 +155,7 @@
|
||||
<dt id="pass-val"><b>-pass val</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The private key password source. For more information about the format of <b>val</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The private key password source. For more information about the format of <b>val</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="dcert-infile--dkey-infile"><b>-dcert infile</b>, <b>-dkey infile</b></dt>
|
||||
@ -305,7 +305,7 @@
|
||||
<dt id="id_prefix-val"><b>-id_prefix val</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Generate SSL/TLS session IDs prefixed by <b>val</b>. This is mostly useful for testing any SSL/TLS code (eg. proxies) that wish to deal with multiple servers, when each of which might be generating a unique range of session IDs (eg. with a certain prefix).</p>
|
||||
<p>Generate SSL/TLS session IDs prefixed by <b>val</b>. This is mostly useful for testing any SSL/TLS code (e.g. proxies) that wish to deal with multiple servers, when each of which might be generating a unique range of session IDs (e.g. with a certain prefix).</p>
|
||||
|
||||
</dd>
|
||||
<dt id="rand-file"><b>-rand file...</b></dt>
|
||||
@ -565,7 +565,7 @@
|
||||
<dt id="alpn-val--nextprotoneg-val"><b>-alpn val</b>, <b>-nextprotoneg val</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>These flags enable the Enable the Application-Layer Protocol Negotiation or Next Protocol Negotiation (NPN) extension, respectively. ALPN is the IETF standard and replaces NPN. The <b>val</b> list is a comma-separated list of supported protocol names. The list should contain the most desirable protocols first. Protocol names are printable ASCII strings, for example "http/1.1" or "spdy/3". The flag <b>-nextprotoneg</b> cannot be specified if <b>-tls1_3</b> is used.</p>
|
||||
<p>These flags enable the Application-Layer Protocol Negotiation or Next Protocol Negotiation (NPN) extension, respectively. ALPN is the IETF standard and replaces NPN. The <b>val</b> list is a comma-separated list of supported protocol names. The list should contain the most desirable protocols first. Protocol names are printable ASCII strings, for example "http/1.1" or "spdy/3". The flag <b>-nextprotoneg</b> cannot be specified if <b>-tls1_3</b> is used.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="engine-val"><b>-engine val</b></dt>
|
||||
@ -702,7 +702,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -162,9 +162,9 @@
|
||||
|
||||
<p>If the handshake fails then there are several possible causes, if it is nothing obvious like no client certificate then the <b>-bugs</b> and <b>-ssl3</b> options can be tried in case it is a buggy server. In particular you should play with these options <b>before</b> submitting a bug report to an OpenSSL mailing list.</p>
|
||||
|
||||
<p>A frequent problem when attempting to get client certificates working is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its "acceptable CA list" when it requests a certificate. By using <a href="../man1/s_client.html">s_client(1)</a> the CA list can be viewed and checked. However some servers only request client authentication after a specific URL is requested. To obtain the list in this case it is necessary to use the <b>-prexit</b> option of <a href="../man1/s_client.html">s_client(1)</a> and send an HTTP request for an appropriate page.</p>
|
||||
<p>A frequent problem when attempting to get client certificates working is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its "acceptable CA list" when it requests a certificate. By using <a href="../man1/s_client.html">s_client(1)</a> the CA list can be viewed and checked. However, some servers only request client authentication after a specific URL is requested. To obtain the list in this case it is necessary to use the <b>-prexit</b> option of <a href="../man1/s_client.html">s_client(1)</a> and send an HTTP request for an appropriate page.</p>
|
||||
|
||||
<p>If a certificate is specified on the command line using the <b>-cert</b> option it will not be used unless the server specifically requests a client certificate. Therefor merely including a client certificate on the command line is no guarantee that the certificate works.</p>
|
||||
<p>If a certificate is specified on the command line using the <b>-cert</b> option it will not be used unless the server specifically requests a client certificate. Therefore, merely including a client certificate on the command line is no guarantee that the certificate works.</p>
|
||||
|
||||
<h1 id="BUGS">BUGS</h1>
|
||||
|
||||
|
@ -171,7 +171,7 @@
|
||||
<pre><code>-----BEGIN SSL SESSION PARAMETERS-----
|
||||
-----END SSL SESSION PARAMETERS-----</code></pre>
|
||||
|
||||
<p>Since the SSL session output contains the master key it is possible to read the contents of an encrypted session using this information. Therefore appropriate security precautions should be taken if the information is being output by a "real" application. This is however strongly discouraged and should only be used for debugging purposes.</p>
|
||||
<p>Since the SSL session output contains the master key it is possible to read the contents of an encrypted session using this information. Therefore, appropriate security precautions should be taken if the information is being output by a "real" application. This is however strongly discouraged and should only be used for debugging purposes.</p>
|
||||
|
||||
<h1 id="BUGS">BUGS</h1>
|
||||
|
||||
|
@ -253,7 +253,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The private key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="rand-file"><b>-rand file...</b></dt>
|
||||
@ -442,7 +442,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -71,7 +71,7 @@
|
||||
<dt id="passin-password"><b>-passin password</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The input file password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="challenge-string"><b>-challenge string</b></dt>
|
||||
@ -155,7 +155,7 @@ dq+NQ3F+X4deMx9AaEglZtULwV4=</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -58,7 +58,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>the key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>the key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="text"><b>-text</b></dt>
|
||||
@ -139,7 +139,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -58,15 +58,15 @@
|
||||
<li><p>The TSA client computes a one-way hash value for a data file and sends the hash to the TSA.</p>
|
||||
|
||||
</li>
|
||||
<li><p>The TSA attaches the current date and time to the received hash value, signs them and sends the time stamp token back to the client. By creating this token the TSA certifies the existence of the original data file at the time of response generation.</p>
|
||||
<li><p>The TSA attaches the current date and time to the received hash value, signs them and sends the timestamp token back to the client. By creating this token the TSA certifies the existence of the original data file at the time of response generation.</p>
|
||||
|
||||
</li>
|
||||
<li><p>The TSA client receives the time stamp token and verifies the signature on it. It also checks if the token contains the same hash value that it had sent to the TSA.</p>
|
||||
<li><p>The TSA client receives the timestamp token and verifies the signature on it. It also checks if the token contains the same hash value that it had sent to the TSA.</p>
|
||||
|
||||
</li>
|
||||
</ol>
|
||||
|
||||
<p>There is one DER encoded protocol data unit defined for transporting a time stamp request to the TSA and one for sending the time stamp response back to the client. The <b>ts</b> command has three main functions: creating a time stamp request based on a data file, creating a time stamp response based on a request, verifying if a response corresponds to a particular request or a data file.</p>
|
||||
<p>There is one DER encoded protocol data unit defined for transporting a timestamp request to the TSA and one for sending the timestamp response back to the client. The <b>ts</b> command has three main functions: creating a timestamp request based on a data file, creating a timestamp response based on a request, verifying if a response corresponds to a particular request or a data file.</p>
|
||||
|
||||
<p>There is no support for sending the requests/responses automatically over HTTP or TCP yet as suggested in RFC 3161. The users must send the requests either by ftp or e-mail.</p>
|
||||
|
||||
@ -74,7 +74,7 @@
|
||||
|
||||
<h2 id="Time-Stamp-Request-generation">Time Stamp Request generation</h2>
|
||||
|
||||
<p>The <b>-query</b> switch can be used for creating and printing a time stamp request with the following options:</p>
|
||||
<p>The <b>-query</b> switch can be used for creating and printing a timestamp request with the following options:</p>
|
||||
|
||||
<dl>
|
||||
|
||||
@ -99,7 +99,7 @@
|
||||
<dt id="data-file_to_hash"><b>-data</b> file_to_hash</dt>
|
||||
<dd>
|
||||
|
||||
<p>The data file for which the time stamp request needs to be created. stdin is the default if neither the <b>-data</b> nor the <b>-digest</b> parameter is specified. (Optional)</p>
|
||||
<p>The data file for which the timestamp request needs to be created. stdin is the default if neither the <b>-data</b> nor the <b>-digest</b> parameter is specified. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="digest-digest_bytes"><b>-digest</b> digest_bytes</dt>
|
||||
@ -117,7 +117,7 @@
|
||||
<dt id="tspolicy-object_id"><b>-tspolicy</b> object_id</dt>
|
||||
<dd>
|
||||
|
||||
<p>The policy that the client expects the TSA to use for creating the time stamp token. Either the dotted OID notation or OID names defined in the config file can be used. If no policy is requested the TSA will use its own default policy. (Optional)</p>
|
||||
<p>The policy that the client expects the TSA to use for creating the timestamp token. Either the dotted OID notation or OID names defined in the config file can be used. If no policy is requested the TSA will use its own default policy. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="no_nonce"><b>-no_nonce</b></dt>
|
||||
@ -135,7 +135,7 @@
|
||||
<dt id="in-request.tsq"><b>-in</b> request.tsq</dt>
|
||||
<dd>
|
||||
|
||||
<p>This option specifies a previously created time stamp request in DER format that will be printed into the output file. Useful when you need to examine the content of a request in human-readable format. (Optional)</p>
|
||||
<p>This option specifies a previously created timestamp request in DER format that will be printed into the output file. Useful when you need to examine the content of a request in human-readable format. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-request.tsq"><b>-out</b> request.tsq</dt>
|
||||
@ -154,7 +154,7 @@
|
||||
|
||||
<h2 id="Time-Stamp-Response-generation">Time Stamp Response generation</h2>
|
||||
|
||||
<p>A time stamp response (TimeStampResp) consists of a response status and the time stamp token itself (ContentInfo), if the token generation was successful. The <b>-reply</b> command is for creating a time stamp response or time stamp token based on a request and printing the response/token in human-readable format. If <b>-token_out</b> is not specified the output is always a time stamp response (TimeStampResp), otherwise it is a time stamp token (ContentInfo).</p>
|
||||
<p>A timestamp response (TimeStampResp) consists of a response status and the timestamp token itself (ContentInfo), if the token generation was successful. The <b>-reply</b> command is for creating a timestamp response or timestamp token based on a request and printing the response/token in human-readable format. If <b>-token_out</b> is not specified the output is always a timestamp response (TimeStampResp), otherwise it is a timestamp token (ContentInfo).</p>
|
||||
|
||||
<dl>
|
||||
|
||||
@ -173,13 +173,13 @@
|
||||
<dt id="queryfile-request.tsq"><b>-queryfile</b> request.tsq</dt>
|
||||
<dd>
|
||||
|
||||
<p>The name of the file containing a DER encoded time stamp request. (Optional)</p>
|
||||
<p>The name of the file containing a DER encoded timestamp request. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="passin-password_src"><b>-passin</b> password_src</dt>
|
||||
<dd>
|
||||
|
||||
<p>Specifies the password source for the private key of the TSA. See <b>PASS PHRASE ARGUMENTS</b> in <a href="../man1/openssl.html">openssl(1)</a>. (Optional)</p>
|
||||
<p>Specifies the password source for the private key of the TSA. See <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="signer-tsa_cert.pem"><b>-signer</b> tsa_cert.pem</dt>
|
||||
@ -215,13 +215,13 @@
|
||||
<dt id="in-response.tsr"><b>-in</b> response.tsr</dt>
|
||||
<dd>
|
||||
|
||||
<p>Specifies a previously created time stamp response or time stamp token (if <b>-token_in</b> is also specified) in DER format that will be written to the output file. This option does not require a request, it is useful e.g. when you need to examine the content of a response or token or you want to extract the time stamp token from a response. If the input is a token and the output is a time stamp response a default 'granted' status info is added to the token. (Optional)</p>
|
||||
<p>Specifies a previously created timestamp response or timestamp token (if <b>-token_in</b> is also specified) in DER format that will be written to the output file. This option does not require a request, it is useful e.g. when you need to examine the content of a response or token or you want to extract the timestamp token from a response. If the input is a token and the output is a timestamp response a default 'granted' status info is added to the token. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="token_in"><b>-token_in</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>This flag can be used together with the <b>-in</b> option and indicates that the input is a DER encoded time stamp token (ContentInfo) instead of a time stamp response (TimeStampResp). (Optional)</p>
|
||||
<p>This flag can be used together with the <b>-in</b> option and indicates that the input is a DER encoded timestamp token (ContentInfo) instead of a timestamp response (TimeStampResp). (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="out-response.tsr"><b>-out</b> response.tsr</dt>
|
||||
@ -233,7 +233,7 @@
|
||||
<dt id="token_out"><b>-token_out</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The output is a time stamp token (ContentInfo) instead of time stamp response (TimeStampResp). (Optional)</p>
|
||||
<p>The output is a timestamp token (ContentInfo) instead of timestamp response (TimeStampResp). (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="text1"><b>-text</b></dt>
|
||||
@ -252,7 +252,7 @@
|
||||
|
||||
<h2 id="Time-Stamp-Response-verification">Time Stamp Response verification</h2>
|
||||
|
||||
<p>The <b>-verify</b> command is for verifying if a time stamp response or time stamp token is valid and matches a particular time stamp request or data file. The <b>-verify</b> command does not use the configuration file.</p>
|
||||
<p>The <b>-verify</b> command is for verifying if a timestamp response or timestamp token is valid and matches a particular timestamp request or data file. The <b>-verify</b> command does not use the configuration file.</p>
|
||||
|
||||
<dl>
|
||||
|
||||
@ -271,19 +271,19 @@
|
||||
<dt id="queryfile-request.tsq1"><b>-queryfile</b> request.tsq</dt>
|
||||
<dd>
|
||||
|
||||
<p>The original time stamp request in DER format. The <b>-data</b> and <b>-digest</b> options must not be specified with this one. (Optional)</p>
|
||||
<p>The original timestamp request in DER format. The <b>-data</b> and <b>-digest</b> options must not be specified with this one. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="in-response.tsr1"><b>-in</b> response.tsr</dt>
|
||||
<dd>
|
||||
|
||||
<p>The time stamp response that needs to be verified in DER format. (Mandatory)</p>
|
||||
<p>The timestamp response that needs to be verified in DER format. (Mandatory)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="token_in1"><b>-token_in</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>This flag can be used together with the <b>-in</b> option and indicates that the input is a DER encoded time stamp token (ContentInfo) instead of a time stamp response (TimeStampResp). (Optional)</p>
|
||||
<p>This flag can be used together with the <b>-in</b> option and indicates that the input is a DER encoded timestamp token (ContentInfo) instead of a timestamp response (TimeStampResp). (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="CApath-trusted_cert_path"><b>-CApath</b> trusted_cert_path</dt>
|
||||
@ -347,7 +347,7 @@
|
||||
<dt id="serial"><b>serial</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The name of the file containing the hexadecimal serial number of the last time stamp response created. This number is incremented by 1 for each response. If the file does not exist at the time of response generation a new file is created with serial number 1. (Mandatory)</p>
|
||||
<p>The name of the file containing the hexadecimal serial number of the last timestamp response created. This number is incremented by 1 for each response. If the file does not exist at the time of response generation a new file is created with serial number 1. (Mandatory)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="crypto_device"><b>crypto_device</b></dt>
|
||||
@ -407,7 +407,7 @@
|
||||
<dt id="clock_precision_digits"><b>clock_precision_digits</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Specifies the maximum number of digits, which represent the fraction of seconds, that need to be included in the time field. The trailing zeroes must be removed from the time, so there might actually be fewer digits, or no fraction of seconds at all. Supported only on UNIX platforms. The maximum value is 6, default is 0. (Optional)</p>
|
||||
<p>Specifies the maximum number of digits, which represent the fraction of seconds, that need to be included in the time field. The trailing zeros must be removed from the time, so there might actually be fewer digits, or no fraction of seconds at all. Supported only on UNIX platforms. The maximum value is 6, default is 0. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="ordering"><b>ordering</b></dt>
|
||||
@ -442,12 +442,12 @@
|
||||
|
||||
<h2 id="Time-Stamp-Request">Time Stamp Request</h2>
|
||||
|
||||
<p>To create a time stamp request for design1.txt with SHA-1 without nonce and policy and no certificate is required in the response:</p>
|
||||
<p>To create a timestamp request for design1.txt with SHA-1 without nonce and policy and no certificate is required in the response:</p>
|
||||
|
||||
<pre><code>openssl ts -query -data design1.txt -no_nonce \
|
||||
-out design1.tsq</code></pre>
|
||||
|
||||
<p>To create a similar time stamp request with specifying the message imprint explicitly:</p>
|
||||
<p>To create a similar timestamp request with specifying the message imprint explicitly:</p>
|
||||
|
||||
<pre><code>openssl ts -query -digest b7e5d3f93198b38379852f2c04e78d73abdd0f4b \
|
||||
-no_nonce -out design1.tsq</code></pre>
|
||||
@ -456,7 +456,7 @@
|
||||
|
||||
<pre><code>openssl ts -query -in design1.tsq -text</code></pre>
|
||||
|
||||
<p>To create a time stamp request which includes the MD-5 digest of design2.txt, requests the signer certificate and nonce, specifies a policy id (assuming the tsa_policy1 name is defined in the OID section of the config file):</p>
|
||||
<p>To create a timestamp request which includes the MD-5 digest of design2.txt, requests the signer certificate and nonce, specifies a policy id (assuming the tsa_policy1 name is defined in the OID section of the config file):</p>
|
||||
|
||||
<pre><code>openssl ts -query -data design2.txt -md5 \
|
||||
-tspolicy tsa_policy1 -cert -out design2.tsq</code></pre>
|
||||
@ -469,7 +469,7 @@
|
||||
|
||||
<p>See <a href="../man1/req.html">req(1)</a>, <a href="../man1/ca.html">ca(1)</a>, and <a href="../man1/x509.html">x509(1)</a> for instructions. The examples below assume that cacert.pem contains the certificate of the CA, tsacert.pem is the signing certificate issued by cacert.pem and tsakey.pem is the private key of the TSA.</p>
|
||||
|
||||
<p>To create a time stamp response for a request:</p>
|
||||
<p>To create a timestamp response for a request:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -queryfile design1.tsq -inkey tsakey.pem \
|
||||
-signer tsacert.pem -out design1.tsr</code></pre>
|
||||
@ -478,41 +478,41 @@
|
||||
|
||||
<pre><code>openssl ts -reply -queryfile design1.tsq -out design1.tsr</code></pre>
|
||||
|
||||
<p>To print a time stamp reply to stdout in human readable format:</p>
|
||||
<p>To print a timestamp reply to stdout in human readable format:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -in design1.tsr -text</code></pre>
|
||||
|
||||
<p>To create a time stamp token instead of time stamp response:</p>
|
||||
<p>To create a timestamp token instead of timestamp response:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -queryfile design1.tsq -out design1_token.der -token_out</code></pre>
|
||||
|
||||
<p>To print a time stamp token to stdout in human readable format:</p>
|
||||
<p>To print a timestamp token to stdout in human readable format:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -in design1_token.der -token_in -text -token_out</code></pre>
|
||||
|
||||
<p>To extract the time stamp token from a response:</p>
|
||||
<p>To extract the timestamp token from a response:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -in design1.tsr -out design1_token.der -token_out</code></pre>
|
||||
|
||||
<p>To add 'granted' status info to a time stamp token thereby creating a valid response:</p>
|
||||
<p>To add 'granted' status info to a timestamp token thereby creating a valid response:</p>
|
||||
|
||||
<pre><code>openssl ts -reply -in design1_token.der -token_in -out design1.tsr</code></pre>
|
||||
|
||||
<h2 id="Time-Stamp-Verification">Time Stamp Verification</h2>
|
||||
|
||||
<p>To verify a time stamp reply against a request:</p>
|
||||
<p>To verify a timestamp reply against a request:</p>
|
||||
|
||||
<pre><code>openssl ts -verify -queryfile design1.tsq -in design1.tsr \
|
||||
-CAfile cacert.pem -untrusted tsacert.pem</code></pre>
|
||||
|
||||
<p>To verify a time stamp reply that includes the certificate chain:</p>
|
||||
<p>To verify a timestamp reply that includes the certificate chain:</p>
|
||||
|
||||
<pre><code>openssl ts -verify -queryfile design2.tsq -in design2.tsr \
|
||||
-CAfile cacert.pem</code></pre>
|
||||
|
||||
<p>To verify a time stamp token against the original data file: openssl ts -verify -data design2.txt -in design2.tsr \ -CAfile cacert.pem</p>
|
||||
<p>To verify a timestamp token against the original data file: openssl ts -verify -data design2.txt -in design2.tsr \ -CAfile cacert.pem</p>
|
||||
|
||||
<p>To verify a time stamp token against a message imprint: openssl ts -verify -digest b7e5d3f93198b38379852f2c04e78d73abdd0f4b \ -in design2.tsr -CAfile cacert.pem</p>
|
||||
<p>To verify a timestamp token against a message imprint: openssl ts -verify -digest b7e5d3f93198b38379852f2c04e78d73abdd0f4b \ -in design2.tsr -CAfile cacert.pem</p>
|
||||
|
||||
<p>You could also look at the 'test' directory for more examples.</p>
|
||||
|
||||
@ -520,10 +520,10 @@
|
||||
|
||||
<ul>
|
||||
|
||||
<li><p>No support for time stamps over SMTP, though it is quite easy to implement an automatic e-mail based TSA with <a href="../man1/procmail.html">procmail(1)</a> and <a href="../man1/perl.html">perl(1)</a>. HTTP server support is provided in the form of a separate apache module. HTTP client support is provided by <a href="../man1/tsget.html">tsget(1)</a>. Pure TCP/IP protocol is not supported.</p>
|
||||
<li><p>No support for timestamps over SMTP, though it is quite easy to implement an automatic e-mail based TSA with <a href="../man1/procmail.html">procmail(1)</a> and <a href="../man1/perl.html">perl(1)</a>. HTTP server support is provided in the form of a separate apache module. HTTP client support is provided by <a href="../man1/tsget.html">tsget(1)</a>. Pure TCP/IP protocol is not supported.</p>
|
||||
|
||||
</li>
|
||||
<li><p>The file containing the last serial number of the TSA is not locked when being read or written. This is a problem if more than one instance of <a href="../man1/openssl.html">openssl(1)</a> is trying to create a time stamp response at the same time. This is not an issue when using the apache server module, it does proper locking.</p>
|
||||
<li><p>The file containing the last serial number of the TSA is not locked when being read or written. This is a problem if more than one instance of <a href="../man1/openssl.html">openssl(1)</a> is trying to create a timestamp response at the same time. This is not an issue when using the apache server module, it does proper locking.</p>
|
||||
|
||||
</li>
|
||||
<li><p>Look for the FIXME word in the source files.</p>
|
||||
@ -543,7 +543,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2006-2019 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -32,9 +32,9 @@
|
||||
|
||||
<h1 id="DESCRIPTION">DESCRIPTION</h1>
|
||||
|
||||
<p>The <b>tsget</b> command can be used for sending a time stamp request, as specified in <b>RFC 3161</b>, to a time stamp server over HTTP or HTTPS and storing the time stamp response in a file. This tool cannot be used for creating the requests and verifying responses, you can use the OpenSSL <b>ts(1)</b> command to do that. <b>tsget</b> can send several requests to the server without closing the TCP connection if more than one requests are specified on the command line.</p>
|
||||
<p>The <b>tsget</b> command can be used for sending a timestamp request, as specified in <b>RFC 3161</b>, to a timestamp server over HTTP or HTTPS and storing the timestamp response in a file. This tool cannot be used for creating the requests and verifying responses, you can use the OpenSSL <b>ts(1)</b> command to do that. <b>tsget</b> can send several requests to the server without closing the TCP connection if more than one requests are specified on the command line.</p>
|
||||
|
||||
<p>The tool sends the following HTTP request for each time stamp request:</p>
|
||||
<p>The tool sends the following HTTP request for each timestamp request:</p>
|
||||
|
||||
<pre><code>POST url HTTP/1.1
|
||||
User-Agent: OpenTSA tsget.pl/<version>
|
||||
@ -55,7 +55,7 @@ Content-Length: length of body
|
||||
<dt id="h-server_url"><b>-h</b> server_url</dt>
|
||||
<dd>
|
||||
|
||||
<p>The URL of the HTTP/HTTPS server listening for time stamp requests.</p>
|
||||
<p>The URL of the HTTP/HTTPS server listening for timestamp requests.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="e-extension"><b>-e</b> extension</dt>
|
||||
@ -67,7 +67,7 @@ Content-Length: length of body
|
||||
<dt id="o-output"><b>-o</b> output</dt>
|
||||
<dd>
|
||||
|
||||
<p>This option can be specified only when just one request is sent to the server. The time stamp response will be written to the given output file. '-' means standard output. In case of multiple time stamp requests or the absence of this argument the names of the output files will be derived from the names of the input files and the default or specified extension argument. (Optional)</p>
|
||||
<p>This option can be specified only when just one request is sent to the server. The timestamp response will be written to the given output file. '-' means standard output. In case of multiple timestamp requests or the absence of this argument the names of the output files will be derived from the names of the input files and the default or specified extension argument. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
<dt id="v"><b>-v</b></dt>
|
||||
@ -127,7 +127,7 @@ Content-Length: length of body
|
||||
<dt id="request">[request]...</dt>
|
||||
<dd>
|
||||
|
||||
<p>List of files containing <b>RFC 3161</b> DER-encoded time stamp requests. If no requests are specified only one request will be sent to the server and it will be read from the standard input. (Optional)</p>
|
||||
<p>List of files containing <b>RFC 3161</b> DER-encoded timestamp requests. If no requests are specified only one request will be sent to the server and it will be read from the standard input. (Optional)</p>
|
||||
|
||||
</dd>
|
||||
</dl>
|
||||
@ -138,29 +138,29 @@ Content-Length: length of body
|
||||
|
||||
<h1 id="EXAMPLES">EXAMPLES</h1>
|
||||
|
||||
<p>The examples below presume that <b>file1.tsq</b> and <b>file2.tsq</b> contain valid time stamp requests, tsa.opentsa.org listens at port 8080 for HTTP requests and at port 8443 for HTTPS requests, the TSA service is available at the /tsa absolute path.</p>
|
||||
<p>The examples below presume that <b>file1.tsq</b> and <b>file2.tsq</b> contain valid timestamp requests, tsa.opentsa.org listens at port 8080 for HTTP requests and at port 8443 for HTTPS requests, the TSA service is available at the /tsa absolute path.</p>
|
||||
|
||||
<p>Get a time stamp response for file1.tsq over HTTP, output is written to file1.tsr:</p>
|
||||
<p>Get a timestamp response for file1.tsq over HTTP, output is written to file1.tsr:</p>
|
||||
|
||||
<pre><code>tsget -h http://tsa.opentsa.org:8080/tsa file1.tsq</code></pre>
|
||||
|
||||
<p>Get a time stamp response for file1.tsq and file2.tsq over HTTP showing progress, output is written to file1.reply and file2.reply respectively:</p>
|
||||
<p>Get a timestamp response for file1.tsq and file2.tsq over HTTP showing progress, output is written to file1.reply and file2.reply respectively:</p>
|
||||
|
||||
<pre><code>tsget -h http://tsa.opentsa.org:8080/tsa -v -e .reply \
|
||||
file1.tsq file2.tsq</code></pre>
|
||||
|
||||
<p>Create a time stamp request, write it to file3.tsq, send it to the server and write the response to file3.tsr:</p>
|
||||
<p>Create a timestamp request, write it to file3.tsq, send it to the server and write the response to file3.tsr:</p>
|
||||
|
||||
<pre><code>openssl ts -query -data file3.txt -cert | tee file3.tsq \
|
||||
| tsget -h http://tsa.opentsa.org:8080/tsa \
|
||||
-o file3.tsr</code></pre>
|
||||
|
||||
<p>Get a time stamp response for file1.tsq over HTTPS without client authentication:</p>
|
||||
<p>Get a timestamp response for file1.tsq over HTTPS without client authentication:</p>
|
||||
|
||||
<pre><code>tsget -h https://tsa.opentsa.org:8443/tsa \
|
||||
-C cacerts.pem file1.tsq</code></pre>
|
||||
|
||||
<p>Get a time stamp response for file1.tsq over HTTPS with certificate-based client authentication (it will ask for the passphrase if client_key.pem is protected):</p>
|
||||
<p>Get a timestamp response for file1.tsq over HTTPS with certificate-based client authentication (it will ask for the passphrase if client_key.pem is protected):</p>
|
||||
|
||||
<pre><code>tsget -h https://tsa.opentsa.org:8443/tsa -C cacerts.pem \
|
||||
-k client_key.pem -c client_cert.pem file1.tsq</code></pre>
|
||||
@ -178,7 +178,7 @@ tsget file1.tsq</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2006-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -85,7 +85,7 @@
|
||||
<dt id="check_ss_sig"><b>-check_ss_sig</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Verify the signature on the self-signed root CA. This is disabled by default because it doesn't add any security.</p>
|
||||
<p>Verify the signature of the last certificate in a chain if the certificate is supposedly self-signed. This is prohibited and will result in an error if it is a non-conforming CA certificate with key usage restrictions not including the keyCertSign bit. This verification is disabled by default because it doesn't add any security.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="CRLfile-file"><b>-CRLfile file</b></dt>
|
||||
@ -296,7 +296,7 @@
|
||||
|
||||
<h1 id="VERIFY-OPERATION">VERIFY OPERATION</h1>
|
||||
|
||||
<p>The <b>verify</b> program uses the same functions as the internal SSL and S/MIME verification, therefore this description applies to these verify operations too.</p>
|
||||
<p>The <b>verify</b> program uses the same functions as the internal SSL and S/MIME verification, therefore, this description applies to these verify operations too.</p>
|
||||
|
||||
<p>There is one crucial difference between the verify operations performed by the <b>verify</b> program: wherever possible an attempt is made to continue after an error whereas normally the verify operation would halt on the first error. This allows all the problems with a certificate chain to be determined.</p>
|
||||
|
||||
@ -312,7 +312,7 @@
|
||||
|
||||
<p>The third operation is to check the trust settings on the root CA. The root CA should be trusted for the supplied purpose. For compatibility with previous versions of OpenSSL, a certificate with no trust settings is considered to be valid for all purposes.</p>
|
||||
|
||||
<p>The final operation is to check the validity of the certificate chain. The validity period is checked against the current system time and the notBefore and notAfter dates in the certificate. The certificate signatures are also checked at this point.</p>
|
||||
<p>The final operation is to check the validity of the certificate chain. For each element in the chain, including the root CA certificate, the validity period as specified by the <code>notBefore</code> and <code>notAfter</code> fields is checked against the current system time. The <b>-attime</b> flag may be used to use a reference time other than "now." The certificate signature is checked as well (except for the signature of the typically self-signed root CA certificate, which is verified only if the <b>-check_ss_sig</b> option is given).</p>
|
||||
|
||||
<p>If all operations complete successfully then certificate is considered valid. If any operation fails then the certificate is not valid.</p>
|
||||
|
||||
@ -813,7 +813,7 @@ error 24 at 1 depth lookup:invalid CA certificate</code></pre>
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
@ -251,7 +251,7 @@
|
||||
<dt id="checkend-arg"><b>-checkend arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>Checks if the certificate expires within the next <b>arg</b> seconds and exits non-zero if yes it will expire or zero if not.</p>
|
||||
<p>Checks if the certificate expires within the next <b>arg</b> seconds and exits nonzero if yes it will expire or zero if not.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="fingerprint"><b>-fingerprint</b></dt>
|
||||
@ -357,7 +357,7 @@
|
||||
<dt id="passin-arg"><b>-passin arg</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>The key password source. For more information about the format of <b>arg</b> see the <b>PASS PHRASE ARGUMENTS</b> section in <a href="../man1/openssl.html">openssl(1)</a>.</p>
|
||||
<p>The key password source. For more information about the format of <b>arg</b> see <a href="../man1/openssl.html">"Pass Phrase Options" in openssl(1)</a>.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="clrext"><b>-clrext</b></dt>
|
||||
@ -417,15 +417,17 @@
|
||||
|
||||
<p>Sets the CA serial number file to use.</p>
|
||||
|
||||
<p>When the <b>-CA</b> option is used to sign a certificate it uses a serial number specified in a file. This file consists of one line containing an even number of hex digits with the serial number to use. After each use the serial number is incremented and written out to the file again.</p>
|
||||
<p>When creating a certificate with this option, and with the <b>-CA</b> option, the certificate serial number is stored in the given file. This file consists of one line containing an even number of hex digits with the serial number used last time. After reading this number, it is incremented and used, and the file is updated.</p>
|
||||
|
||||
<p>The default filename consists of the CA certificate file base name with ".srl" appended. For example if the CA certificate file is called "mycacert.pem" it expects to find a serial number file called "mycacert.srl".</p>
|
||||
|
||||
<p>If the <b>-CA</b> option is specified and neither <-CAserial> or <-CAcreateserial> is given and the default serial number file does not exist, a random number is generated; this is the recommended practice.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="CAcreateserial"><b>-CAcreateserial</b></dt>
|
||||
<dd>
|
||||
|
||||
<p>With this option the CA serial number file is created if it does not exist: it will contain the serial number "02" and the certificate being signed will have the 1 as its serial number. If the <b>-CA</b> option is specified and the serial number file does not exist a random number is generated; this is the recommended practice.</p>
|
||||
<p>With this option and the <b>-CA</b> option the CA serial number file is created if it does not exist. A random number is generated, used for the certificate, and saved into the serial number file determined as described above.</p>
|
||||
|
||||
</dd>
|
||||
<dt id="extfile-filename"><b>-extfile filename</b></dt>
|
||||
@ -880,7 +882,7 @@
|
||||
|
||||
<h1 id="COPYRIGHT">COPYRIGHT</h1>
|
||||
|
||||
<p>Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
<p>Copyright 2000-2022 The OpenSSL Project Authors. All Rights Reserved.</p>
|
||||
|
||||
<p>Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
||||
|
||||
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_free.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_free.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_new.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_new.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSIONS_free.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSIONS_free.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSIONS_new.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSIONS_new.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX_free.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX_free.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX_new.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ADMISSION_SYNTAX_new.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
@ -0,0 +1 @@
|
||||
ADMISSIONS.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdOrRange_free.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdOrRange_free.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdOrRange_new.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdOrRange_new.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdentifierChoice_free.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdentifierChoice_free.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdentifierChoice_new.html
vendored
Symbolic link
1
deps/openssl/android/arm64-v8a/usr/local/share/doc/openssl/html/man3/ASIdentifierChoice_new.html
vendored
Symbolic link
@ -0,0 +1 @@
|
||||
X509_dup.html
|
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user