correct docs

[openssl.git] / doc / apps / pkeyutl.pod

diff --git a/doc/apps/pkeyutl.pod b/doc/apps/pkeyutl.pod
index 9366d967cbad4a1079a33169a70806a4bf1ed3c0..27be9a90079f6a56b7284fd4e61bcc43a9bcec47 100644 (file)
--- a/doc/apps/pkeyutl.pod
+++ b/doc/apps/pkeyutl.pod
@@ -12,6 +12,7 @@ B<openssl> B<pkeyutl>
 [B<-sigfile file>]
 [B<-inkey file>]
 [B<-keyform PEM|DER>]
 [B<-sigfile file>]
 [B<-inkey file>]
 [B<-keyform PEM|DER>]

+[B<-passin arg>]

 [B<-peerkey file>]
 [B<-peerform PEM|DER>]
 [B<-pubin>]
 [B<-peerkey file>]
 [B<-peerform PEM|DER>]
 [B<-pubin>]


@@ -26,6 +27,7 @@ B<openssl> B<pkeyutl>
 [B<-pkeyopt opt:value>]
 [B<-hexdump>]
 [B<-asn1parse>]
 [B<-pkeyopt opt:value>]
 [B<-hexdump>]
 [B<-asn1parse>]

+[B<-engine id>]

 
 =head1 DESCRIPTION
 
 
 =head1 DESCRIPTION
 


@@ -52,7 +54,13 @@ the input key file, by default it should be a private key.
 
 =item B<-keyform PEM|DER>
 
 
 =item B<-keyform PEM|DER>
 

-the key format PEM or DER.
+the key format PEM, DER or ENGINE.
+
+=item B<-passin arg>
+
+the input key password source. For more information about the format of B<arg>
+see the B<PASS PHRASE ARGUMENTS> section in L<openssl(1)|openssl(1)>.
+

 
 =item B<-peerkey file>
 
 
 =item B<-peerkey file>
 


@@ -60,7 +68,15 @@ the peer key file, used by key derivation (agreement) operations.
 
 =item B<-peerform PEM|DER>
 
 
 =item B<-peerform PEM|DER>
 

-the peer key format PEM or DER.
+the peer key format PEM, DER or ENGINE.
+
+=item B<-engine id>
+
+specifying an engine (by its unique B<id> string) will cause B<pkeyutl>
+to attempt to obtain a functional reference to the specified engine,
+thus initialising it if needed. The engine will then be set as the default
+for all available algorithms.
+

 
 =item B<-pubin>
 
 
 =item B<-pubin>
 


@@ -152,11 +168,11 @@ specified.
 
 =item B<rsa_pss_saltlen:len>
 
 
 =item B<rsa_pss_saltlen:len>
 

-For B<pss> mode only this option specifies the salt length. Two special
-values are supported: -1 sets the salt length to the digest length. When
-signing -2 sets the salt length to the maximum permissible value. When
-verifying -2 causes the salt length to be automatically determined based
-on the B<PSS> block structure.
+For B<pss> mode only this option specifies the salt length. Two special values
+are supported: -1 sets the salt length to the digest length. When signing -2
+sets the salt length to the maximum permissible value. When verifying -2 causes
+the salt length to be automatically determined based on the B<PSS> block
+structure.

 
 =back
 
 
 =back