apps/x509: Improve doc fix for -CAserial anc -CAcreateserial

This follows up on https://github.com/openssl/openssl/pull/18373

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18804)
This commit is contained in:
Dr. David von Oheimb 2022-07-14 15:12:55 +02:00 committed by Dr. David von Oheimb
parent 30d398ad37
commit 7a16f179ab

View File

@ -496,8 +496,9 @@ See L<openssl-format-options(1)> for details.
Sets the CA serial number file to use. Sets the CA serial number file to use.
When creating a certificate with this option, the certificate serial number When creating a certificate with this option and with the B<-CA> option,
is stored in the given file. This file consists of one line containing the certificate serial number is stored in the given file.
This file consists of one line containing
an even number of hex digits with the serial number used last time. an even number of hex digits with the serial number used last time.
After reading this number, it is incremented and used, and the file is updated. After reading this number, it is incremented and used, and the file is updated.
@ -512,9 +513,10 @@ a random number is generated; this is the recommended practice.
=item B<-CAcreateserial> =item B<-CAcreateserial>
With this option the CA serial number file is created if it does not exist. With this option and the B<-CA> option
A random number is generated, used for the certificate, and saved into the the CA serial number file is created if it does not exist.
serial number file in that case. A random number is generated, used for the certificate,
and saved into the serial number file determined as described above.
=back =back