apps/pkey.c: Make clear that -passout is not supported for DER output

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13712)
This commit is contained in:
Dr. David von Oheimb 2020-12-15 14:30:38 +01:00 committed by Dr. David von Oheimb
parent 400e2acfe0
commit 475d10028e
2 changed files with 8 additions and 1 deletions

View File

@ -66,7 +66,7 @@ const OPTIONS pkey_options[] = {
OPT_SECTION("Output"),
{"outform", OPT_OUTFORM, 'F', "Output format (DER or PEM)"},
{"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
{"passout", OPT_PASSOUT, 's', "Output PEM file pass phrase source"},
{"out", OPT_OUT, '>', "Output file"},
{"pubout", OPT_PUBOUT, '-', "Output public key, not private"},
{"text_pub", OPT_TEXT_PUB, '-', "Only output public key components"},
@ -196,6 +196,11 @@ int pkey_main(int argc, char **argv)
if (text && !pubtext)
private = 1;
if (outformat == FORMAT_ASN1 && passoutarg != NULL) {
BIO_printf(bio_err, "The -passout option is not supported for DER output\n");
goto end;
}
if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
BIO_printf(bio_err, "Error getting passwords\n");
goto end;

View File

@ -67,6 +67,8 @@ prompted for.
=item B<-passin> I<arg>, B<-passout> I<arg>
The password source for the input and output file.
The -passout option is not supported for DER output.
For more information about the format of B<arg>
see L<openssl-passphrase-options(1)>.