openssl/doc/man1
Stephan Wurm 8120223773 apps: ca,req,x509: Add explicit start and end dates options
- Added options `-not_before` (start date) and `-not-after` (end date)
  for explicit setting of the validity period of a certificate in the
  apps `ca`, `req` and `x509`
- The new options accept time strings or "today"
- In app `ca`, use the new options as aliases of the already existing
  options `-startdate` and `-enddate`
- When used in apps `req` and `x509`, the end date must be >= the start
  date, in app `ca` end date < start date is also accepted
- In any case, `-not-after` overrides the `-days` option
- Added helper function `check_cert_time_string` to validate given
  certificate time strings
- Use the new helper function in apps `ca`, `req` and `x509`
- Moved redundant code for time string checking into `set_cert_times`
  helper function.
- Added tests for explicit start and end dates in apps `req` and `x509`
- test: Added auxiliary functions for parsing fields from `-text`
  formatted output to `tconversion.pl`
- CHANGES: Added to new section 3.4

Signed-off-by: Stephan Wurm <atomisirsi@gsklan.de>

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21716)
2024-04-09 20:13:31 +02:00
..
build.info
CA.pl.pod
openssl-asn1parse.pod.in
openssl-ca.pod.in apps: ca,req,x509: Add explicit start and end dates options 2024-04-09 20:13:31 +02:00
openssl-ciphers.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-cmds.pod.in
openssl-cmp.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-cms.pod.in
openssl-crl2pkcs7.pod.in
openssl-crl.pod.in Copyright year updates 2024-04-09 13:43:27 +02:00
openssl-dgst.pod.in
openssl-dhparam.pod.in
openssl-dsa.pod.in
openssl-dsaparam.pod.in
openssl-ec.pod.in
openssl-ecparam.pod.in
openssl-enc.pod.in
openssl-engine.pod.in
openssl-errstr.pod.in
openssl-fipsinstall.pod.in
openssl-format-options.pod
openssl-gendsa.pod.in
openssl-genpkey.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-genrsa.pod.in
openssl-info.pod.in
openssl-kdf.pod.in
openssl-list.pod.in
openssl-mac.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-namedisplay-options.pod
openssl-nseq.pod.in
openssl-ocsp.pod.in
openssl-passphrase-options.pod
openssl-passwd.pod.in
openssl-pkcs7.pod.in
openssl-pkcs8.pod.in
openssl-pkcs12.pod.in Convert jdkTrustedKeyUsage to be a pkcs12 cmd line option 2023-10-20 16:30:43 +01:00
openssl-pkey.pod.in
openssl-pkeyparam.pod.in
openssl-pkeyutl.pod.in doc: fix "the a" typos (and other things nearby) 2023-12-29 11:43:20 +01:00
openssl-prime.pod.in
openssl-rand.pod.in Fix typos found by codespell in man pages 2023-12-29 10:13:01 +01:00
openssl-rehash.pod.in
openssl-req.pod.in apps: ca,req,x509: Add explicit start and end dates options 2024-04-09 20:13:31 +02:00
openssl-rsa.pod.in
openssl-rsautl.pod.in
openssl-s_client.pod.in Improve the documentation on TLS record compression 2023-12-22 09:00:19 +00:00
openssl-s_server.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-s_time.pod.in
openssl-sess_id.pod.in
openssl-smime.pod.in
openssl-speed.pod.in
openssl-spkac.pod.in
openssl-srp.pod.in
openssl-storeutl.pod.in Explicitly state what -keys does 2024-04-02 15:31:10 +02:00
openssl-ts.pod.in Copyright year updates 2024-04-09 13:43:27 +02:00
openssl-verification-options.pod
openssl-verify.pod.in
openssl-version.pod.in
openssl-x509.pod.in apps: ca,req,x509: Add explicit start and end dates options 2024-04-09 20:13:31 +02:00
openssl.pod
tsget.pod