Multiple -trusted/-untrusted/-CRLfile options in verify
authorViktor Dukhovni <openssl-users@dukhovni.org>
Sat, 16 Jan 2016 06:15:02 +0000 (01:15 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Thu, 21 Jan 2016 00:04:33 +0000 (19:04 -0500)
commitfeb2f53edc7e9b96cfe9c0ab611461edabdd2b34
tree4a46e701fa35f54f21d45631d7cbae55bd1f6caa
parent0996dc5440cc233f029129182bbb6e3d4613045a
Multiple -trusted/-untrusted/-CRLfile options in verify

It is sometimes useful (especially in automated tests) to supply
multiple trusted or untrusted certificates via separate files rather
than have to prepare a single file containing them all.

To that end, change verify(1) to accept these options zero or more
times.  Also automatically set -no-CAfile and -no-CApath when
-trusted is specified.

Improve verify(1) documentation, which could still use some work.

Reviewed-by: Richard Levitte <levitte@openssl.org>
apps/verify.c
doc/apps/verify.pod
test/recipes/25-test_verify.t