summaryrefslogtreecommitdiff
path: root/usr.bin/openssl
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2024-08-22 12:15:08 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2024-08-22 12:15:08 +0000
commit2f7e594acdfbb2a4fca24aa1dc37c9b98e853300 (patch)
treea05297afabcffd8b835d3880fedf3b4dbaf28b9d /usr.bin/openssl
parent909a20909b27d5963effc6bfa39a298d8923ceb3 (diff)
openssl: adjust manual for LMK and CSP removal
Diffstat (limited to 'usr.bin/openssl')
-rw-r--r--usr.bin/openssl/openssl.112
1 files changed, 2 insertions, 10 deletions
diff --git a/usr.bin/openssl/openssl.1 b/usr.bin/openssl/openssl.1
index c185c7ebf79..d06eeec87cf 100644
--- a/usr.bin/openssl/openssl.1
+++ b/usr.bin/openssl/openssl.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: openssl.1,v 1.158 2024/08/12 15:34:58 job Exp $
+.\" $OpenBSD: openssl.1,v 1.159 2024/08/22 12:15:07 tb Exp $
.\" ====================================================================
.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
.\"
@@ -110,7 +110,7 @@
.\" copied and put under another distribution licence
.\" [including the GNU Public Licence.]
.\"
-.Dd $Mdocdate: August 12 2024 $
+.Dd $Mdocdate: August 22 2024 $
.Dt OPENSSL 1
.Os
.Sh NAME
@@ -3084,7 +3084,6 @@ It is recommended that des3 is used.
.Op Fl certpbe Ar alg
.Op Fl chain
.Op Fl clcerts
-.Op Fl CSP Ar name
.Op Fl descert
.Op Fl export
.Op Fl in Ar file
@@ -3093,7 +3092,6 @@ It is recommended that des3 is used.
.Op Fl keyex
.Op Fl keypbe Ar alg
.Op Fl keysig
-.Op Fl LMK
.Op Fl macalg Ar alg
.Op Fl maciter
.Op Fl name Ar name
@@ -3202,10 +3200,6 @@ For interoperability reasons it is advisable to only use PKCS#12 algorithms.
Include the entire certificate chain of the user certificate.
The standard CA store is used for this search.
If the search fails, it is considered a fatal error.
-.It Fl CSP Ar name
-Write
-.Ar name
-as a Microsoft CSP name.
.It Fl descert
Encrypt the certificate using triple DES; this may render the PKCS#12
file unreadable by some
@@ -3237,8 +3231,6 @@ option marks the key for signing only.
Signing only keys can be used for S/MIME signing, authenticode
(ActiveX control signing)
and SSL client authentication.
-.It Fl LMK
-Add local machine keyset attribute to private key.
.It Fl macalg Ar alg
Specify the MAC digest algorithm.
The default is SHA1.