X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=doc%2Fman1%2Fopenssl-x509.pod;h=b4d41df3b221a19d0a9e216ce807343650ac914b;hp=5fcff0aed4e81169b33e8beebaadf5aa433b9187;hb=3a4e43de473ee80347036d78163889b6b1221210;hpb=f5c14c63226b12e10a9404604657f2860dcfcdee diff --git a/doc/man1/openssl-x509.pod b/doc/man1/openssl-x509.pod index 5fcff0aed4..b4d41df3b2 100644 --- a/doc/man1/openssl-x509.pod +++ b/doc/man1/openssl-x509.pod @@ -373,7 +373,7 @@ Names and values of these options are algorithm-specific. =item B<-passin> I The key password source. For more information about the format of I -see L. +see L. =item B<-clrext> @@ -409,7 +409,7 @@ the B<-signkey> or B<-CA> options. If used in conjunction with the B<-CA> option the serial number file (as specified by the B<-CAserial> or B<-CAcreateserial> options) is not used. -The serial number can be decimal or hex (if preceded by B<0x>). +The serial number can be decimal or hex (if preceded by C<0x>). =item B<-CA> I @@ -437,8 +437,9 @@ an even number of hex digits with the serial number to use. After each use the serial number is incremented and written out to the file again. The default filename consists of the CA certificate file base name with -".srl" appended. For example if the CA certificate file is called -"mycacert.pem" it expects to find a serial number file called "mycacert.srl". +F<.srl> appended. For example if the CA certificate file is called +F it expects to find a serial number file called +F. =item B<-CAcreateserial> @@ -483,10 +484,10 @@ The format of the key file can be specified using the B<-keyform> option. =item B<-subj> I When a certificate is created set its subject name to the given value. -The arg must be formatted as I. +The arg must be formatted as C. Keyword characters may be escaped by \ (backslash), and whitespace is retained. Empty values are permitted, but the corresponding type will not be included -in the certificate. Giving a single I will lead to an empty sequence of RDNs +in the certificate. Giving a single C will lead to an empty sequence of RDNs (a NULL subject DN). Unless the B<-CA> option is given the issuer is set to the same value.