RT3511: doc fix; req default serial is random

[openssl.git] / doc / apps / req.pod

diff --git a/doc/apps/req.pod b/doc/apps/req.pod
index 51d30836a86795e4f329240147db172d569d0a35..eb840be87fe1126da90445fb29e88afeba6a7910 100644 (file)
--- a/doc/apps/req.pod
+++ b/doc/apps/req.pod
@@ -235,8 +235,8 @@ this option outputs a self signed certificate instead of a certificate
 request. This is typically used to generate a test certificate or
 a self signed root CA. The extensions added to the certificate
 (if any) are specified in the configuration file. Unless specified
-using the B<set_serial> option B<0> will be used for the serial
-number.
+using the B<set_serial> option, a large random number will be used for
+the serial number.
 
 =item B<-days n>
 
@@ -535,7 +535,7 @@ Sample configuration file prompting for field values:
  default_keyfile       = privkey.pem
  distinguished_name    = req_distinguished_name
  attributes            = req_attributes
- x509_extensions       = v3_ca
+ req_extensions                = v3_ca
 
  dirstring_type = nobmp