summaryrefslogtreecommitdiff
path: root/usr.bin/openssl/openssl.1
AgeCommit message (Collapse)Author
2021-03-17Add DTLSv1.2 support to openssl(1) s_client/s_server.Joel Sing
ok inoguchi@ tb@
2020-12-30Document meaning of '*' in genrsa outputTheo Buehler
ok inoguchi jmc kn
2020-11-01some comma fixes; from varik valeforJason McIntyre
(audio.4 tweaked from that submitted)
2020-10-26Add a -legacy_verify flag to force use of the old validator for debuggingTheo Buehler
and testing purposes. ok beck inoguchi jsing
2020-07-14Remove hyphenKinichiro Inoguchi
2020-07-14Add single space between pem and ...Kinichiro Inoguchi
2020-07-14Add manual for openssl(1) certhashKinichiro Inoguchi
ok jmc@
2020-05-13Add description for -tls1_3 and -no_tls1_3 options to openssl(1) s_serverKinichiro Inoguchi
ok jsing@ tb@
2020-04-25In s_server.c rev. 1.33, jsing added support for "openssl s_server -groups";Ingo Schwarze
document it and deprecate "openssl s_server -named_curve". While here, fix the error in the synopsis for "openssl s_client -groups" and use unified argument naming and similar wording like in SSL_CTX_set1_groups_list(3). OK jsing@
2020-02-19Tag subcommand sectionskn
Allow semantic lookup by manually tagging sections (.Sh) for which no automatic tagging has been implemented; this thereby also eliminates false positives such that ":tx509<Enter>" now jumps to the X509 section. feedback remi inoguchi schwarze OK tb
2020-02-16Add -tls1_3 and -notls1_3 options to openssl(1) s_client.Joel Sing
Also stop using version pinned methods, instead setting the min and max protocol versions. Requested by inoguchi@ ok inoguchi@ tb@
2019-12-18use "Currently" in the doc for "openssl enc" when talking about defaultStuart Henderson
md, to hint that it might not always be the case (e.g. if dealing with files from a different version of the tool). ok tb@
2019-12-18In January, the default digest used in the openssl enc command wasTheo Buehler
changed from md5 to sha256. Update manual to reflect that. From Fabio Scotoni ok jmc
2019-11-28Add manual for openssl(1) cmsKinichiro Inoguchi
ok and comments jmc@
2019-11-19Add manual descriptions for openssl(1) req -addextKinichiro Inoguchi
ok jmc@
2019-10-04the formatting for the mini synopses in this page did not render wellJason McIntyre
on html or groff. the solution, to replace the non-standard .nr macros with a hang list, was provided by ingo - thanks! ok schwarze
2019-08-05Remove -port option from s_server since it is same as -acceptKinichiro Inoguchi
ok schwarze@
2019-07-16Fix typo and -keyform argument in openssl(1) manualKinichiro Inoguchi
- s/outputed/outputted/ - s/trused/trusted/ - add der as argument and describe pem is the default
2019-07-12Fix manual openssl(1) s_serverKinichiro Inoguchi
- Add undocumented options below. -alpn, -cert2, -certform, -dcertform, -dkeyform, -dpass, -dtls1, -key2, -keyform, -keymatexport, -keymatexportlen, -mtu, -named_curve, -no_cache, -no_ecdhe, -no_ticket, -pass, -port, -servername, -servername_fatal, -status, -status_timeout, -status_url, -status_verbose, -timeout, -tlsextdebug, -use_srtp, -verify_return_error - Remove -hack, -psk and -psk_hint since not exist in source code. I didn't add these 5 options since these were no-op. -chain, -legacy_renegotiation, -nextprotoneg, -no_comp, -no_ssl2 This option was removed from manual in the past. -no_ssl3 ok and suggestions from jmc@
2019-07-11Fix manual openssl(1) s_clientKinichiro Inoguchi
- Add undocumented options below. -alpn, -certform, -dtls1, -host, -keyform, -keymatexport, -keymatexportlen, -legacy_server_connect, -mtu, -no_ign_eof, -no_legacy_server_connect, -pass -port, -serverpref, -sess_in, -sess_out, -status, -timeout, -use_srtp, -verify_return_error - Remove -psk and -psk_identity since not exist in source code. I didn't add these 4 options since these were no-op. -nextprotoneg, -legacy_renegotiation, -no_comp, -no_ssl2 This option was removed from manual in the past. -no_ssl3 ok jmc@
2019-07-09Fix manual openssl(1) genrsaKinichiro Inoguchi
Add missing -camellia*/-idea description to genrsa section. ok jmc@
2019-07-08Fix manual openssl(1) dsa, ocsp, rsa and smimeKinichiro Inoguchi
- dsa : add missing -pvk-none, -pvk-strong and -pvk-weak add pvk format to -inform and -outform - ocsp : add missing -header, -ignore_err, -no_explicit and -timeout - rsa : add missing -pvk-none, -pvk-strong and -pvk-weak add missing -RSAPublicKey_in and -RSAPublicKey_out add pvk format to -inform and -outform - smime : add missing -nosmimecap - add pvk description at common format part ok jmc@
2019-07-07Fix manual openssl(1) pkcs12, req, verify and x509Kinichiro Inoguchi
- For pkcs12, add -camellia*/-idea, -LMK and -password - For req, add -multivalue-rdn, -pkeyopt and -sigopt - For verify, add -CRLfile and -trusted, and down -check_ss_sig description - For x509, add -next_serial and -sigopt - Remove the escape in -multivalue-rdn from ca section ok jmc@
2019-07-05Fix manual openssl(1) ec, enc and pkcs7Kinichiro Inoguchi
- For ec, add -param_out description - For enc, add -v usage and description - For pkcs7, add -print usage and description ok jmc@
2019-07-05Fix manual openssl(1) dgstKinichiro Inoguchi
- Add undocumented option -r ok jmc@
2019-07-04Fix manual openssl(1) crlKinichiro Inoguchi
- Add undocumented options -crlnumber, -hash_old, -nameopt and -verify ok jmc@
2019-07-04Fix manual openssl(1) caKinichiro Inoguchi
- Add undocumented options -crlsec and -sigopt - Sync argument name between usage and options description ok jmc@
2019-06-07tidy up the formatting of gendsa synopsis a little;Jason McIntyre
2019-06-07Convert openssl(1) gendsa to the newer style of option handlingKinichiro Inoguchi
- Adapt openssl(1) gendsa command to new option handling. - Add lacking ciphers and passout description in openssl.1 manpage. - Describe paramfile as argument in openssl.1 manpage. ok bcook@
2019-02-04Document missing command line options for the rsautl command.Theo Buehler
ok jsing, "looks good!" jmc
2019-01-28spelling;Jason McIntyre
2019-01-18switch the default algorithm for the dgst command from MD5 to SHA256Christian Weisgerber
ok deraadt@
2019-01-18tweak previous;Jason McIntyre
2019-01-18Add the -iter and -pbkdf2 argumenst to encBob Beck
2018-11-01Make the documentation of -conv_form match reality. It defaultsTheo Buehler
to uncompressed rather than compressed. From Jacqueline Jolicoeur
2018-08-24The broken pkcs8 formats generated by openssl pkcs -{embed,nooct,nsdb}Theo Buehler
are no longer supported. Remove their documentation. ok jsing
2018-04-10Delete the description of the argument of the "ciphers" commandIngo Schwarze
because it was (1) woefully incomplete, (2) partially outdated and wrong, (3) in parts imprecisely worded and hard to understand, (4) excessively technical for a section 1 manual, (5) of excessive size for this particular page, (6) and didn't belong here in the first place because it essentially tried to document a C API - SSL_CTX_set_cipher_list(3), which is now documented, so point to it.
2018-03-31Improve description of openssl(1) ciphers.Ingo Schwarze
* Remove -tls1 option which has no effect. * For -V, sort the fields in the order they are printed, and do not talk about key size restrictions, nothing like that is printed.
2018-03-30Updates to the description of "openssl ca" from OpenSSL.Ingo Schwarze
Some options were missing, some were in the wrong section (CRL-related or not), and there were some minor errors, typos, and omissions.
2018-03-30checked the content against the current version of OpenSSL openssl.pod;Ingo Schwarze
resulting fixes: markup of "command" below SYNOPSIS and links to the config file formats below SEE ALSO
2018-03-22organizationUnitName -> organizationalUnitName;Jason McIntyre
from matt schwartz
2018-02-28ca start/enddates require all 4 yyyy from 2050 on; first twoJason McIntyre
are otherwise optional diff from holger mikolon, tweaked a bit by me
2018-02-18document s_client -groups;Jason McIntyre
2017-08-28Remove SSLv23 padding mode.Joel Sing
2017-05-16typo: ket -> key.Theo Buehler
from "fenderq" on freenode via tj
2017-01-03consistently spell ASN.1;Jason McIntyre
2016-10-06typoChristian Weisgerber
2016-09-22trim STANDARDS; ok jsingJason McIntyre
2016-09-22some minor cleanup;Jason McIntyre
2016-09-22shorten x509;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-05 20:47:00 +0000