mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-02-17 14:32:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add documentetion for noCheck extension and add a few cross references to

Browse Source 
the extension documentation.
This commit is contained in:
Dr. Stephen Henson 2006-11-07 12:51:27 +00:00
parent 224328e404
commit 137de5b157
5 changed files with 26 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/apps/ca.pod
View File

@ -205,7 +205,9 @@ the section of the configuration file containing certificate extensions
to be added when a certificate is issued (defaults to B<x509_extensions> to be added when a certificate is issued (defaults to B<x509_extensions>
unless the B<-extfile> option is used). If no extension section is unless the B<-extfile> option is used). If no extension section is
present then, a V1 certificate is created. If the extension section present then, a V1 certificate is created. If the extension section
is present (even if it is empty), then a V3 certificate is created. is present (even if it is empty), then a V3 certificate is created. See the:w
L<x509v3_config(5)|x509v3_config(5)> manual page for details of the
extension section format.
=item B<-extfile file> =item B<-extfile file>
@ -299,7 +301,9 @@ include. If no CRL extension section is present then a V1 CRL is
created, if the CRL extension section is present (even if it is created, if the CRL extension section is present (even if it is
empty) then a V2 CRL is created. The CRL extensions specified are empty) then a V2 CRL is created. The CRL extensions specified are
CRL extensions and B<not> CRL entry extensions. It should be noted CRL extensions and B<not> CRL entry extensions. It should be noted
that some software (for example Netscape) can't handle V2 CRLs. that some software (for example Netscape) can't handle V2 CRLs. See
L<x509v3_config(5)|x509v3_config(5)> manual page for details of the
extension section format.
=back =back

2
doc/apps/openssl.pod
View File

@ -366,7 +366,7 @@ L<rsautl(1)|rsautl(1)>, L<s_client(1)|s_client(1)>,
L<s_server(1)|s_server(1)>, L<s_time(1)|s_time(1)>, L<s_server(1)|s_server(1)>, L<s_time(1)|s_time(1)>,
L<smime(1)|smime(1)>, L<spkac(1)|spkac(1)>, L<smime(1)|smime(1)>, L<spkac(1)|spkac(1)>,
L<verify(1)|verify(1)>, L<version(1)|version(1)>, L<x509(1)|x509(1)>, L<verify(1)|verify(1)>, L<version(1)|version(1)>, L<x509(1)|x509(1)>,
L<crypto(3)|crypto(3)>, L<ssl(3)|ssl(3)> L<crypto(3)|crypto(3)>, L<ssl(3)|ssl(3)>, L<x509v3_config(5)|x509v3_config(5)>
=head1 HISTORY =head1 HISTORY

7
doc/apps/req.pod
View File

@ -356,7 +356,9 @@ problems with BMPStrings and UTF8Strings: in particular Netscape.
this specifies the configuration file section containing a list of this specifies the configuration file section containing a list of
extensions to add to the certificate request. It can be overridden extensions to add to the certificate request. It can be overridden
by the B<-reqexts> command line switch. by the B<-reqexts> command line switch. See the
L<x509v3_config(5)|x509v3_config(5)> manual page for details of the
extension section format.
=item B<x509_extensions> =item B<x509_extensions>
@ -618,6 +620,7 @@ address in subjectAltName should be input by the user.
=head1 SEE ALSO =head1 SEE ALSO
L<x509(1)|x509(1)>, L<ca(1)|ca(1)>, L<genrsa(1)|genrsa(1)>, L<x509(1)|x509(1)>, L<ca(1)|ca(1)>, L<genrsa(1)|genrsa(1)>,
L<gendsa(1)|gendsa(1)>, L<config(5)|config(5)> L<gendsa(1)|gendsa(1)>, L<config(5)|config(5)>,
L<x509v3_config(5)|x509v3_config(5)>
=cut =cut

4
doc/apps/x509.pod
View File

@ -376,7 +376,9 @@ no extensions are added to the certificate.
the section to add certificate extensions from. If this option is not the section to add certificate extensions from. If this option is not
specified then the extensions should either be contained in the unnamed specified then the extensions should either be contained in the unnamed
(default) section or the default section should contain a variable called (default) section or the default section should contain a variable called
"extensions" which contains the section to use. "extensions" which contains the section to use. See the
L<x509v3_config(5)|x509v3_config(5)> manual page for details of the
extension section format.
=back =back

13
doc/apps/x509v3_config.pod
View File

@ -178,7 +178,7 @@ preceeding the name with a B<+> character.
otherName can include arbitrary data associated with an OID: the value otherName can include arbitrary data associated with an OID: the value
should be the OID followed by a semicolon and the content in standard should be the OID followed by a semicolon and the content in standard
ASN1_generate_nconf() format. L<ASN1_generate_nconf(1)|ASN1_generate_nconf(1)> format.
Examples: Examples:
@ -392,6 +392,14 @@ Examples:
nameConstraints=excluded;email:.com nameConstraints=excluded;email:.com
issuingDistributionPoint = idp_section issuingDistributionPoint = idp_section
=head2 OCSP No Check
The OCSP No Check extension is a string extension but its value is ignored.
Example:
noCheck = ignored
=head1 DEPRECATED EXTENSIONS =head1 DEPRECATED EXTENSIONS
@ -513,7 +521,8 @@ for arbitrary extensions was added in OpenSSL 0.9.8
=head1 SEE ALSO =head1 SEE ALSO
L<req(1)|req(1)>, L<ca(1)|ca(1)>, L<x509(1)|x509(1)> L<req(1)|req(1)>, L<ca(1)|ca(1)>, L<x509(1)|x509(1)>,
L<ASN1_generate_nconf(1)|ASN1_generate_nconf(1)>
=cut =cut