apps/x509: add warnings for options ignored when -CA is not specified

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18373)
This commit is contained in:
Dr. David von Oheimb 2022-05-31 10:03:10 +02:00 committed by Hugo Landau
parent aa73b7d352
commit c54a6a4b0e

View File

@ -662,9 +662,19 @@ int x509_main(int argc, char **argv)
BIO_printf(bio_err, "Cannot use both -key/-signkey and -CA option\n");
goto err;
}
} else if (CAkeyfile != NULL) {
BIO_printf(bio_err,
"Warning: ignoring -CAkey option since no -CA option is given\n");
} else {
#define WARN_NO_CA(opt) BIO_printf(bio_err, \
"Warning: ignoring " opt " option since -CA option is not given\n");
if (CAkeyfile != NULL)
WARN_NO_CA("-CAkey");
if (CAkeyformat != FORMAT_UNDEF)
WARN_NO_CA("-CAkeyform");
if (CAformat != FORMAT_UNDEF)
WARN_NO_CA("-CAform");
if (CAserial != NULL)
WARN_NO_CA("-CAserial");
if (CA_createserial)
WARN_NO_CA("-CAcreateserial");
}
if (extfile == NULL) {