openssl
/
openssl
mirror of https://github.com/openssl/openssl
1
0
Fork 0
Code Issues Releases Wiki Activity

openssl-cmp.pod.in: Update and extend example using Insta Demo CA 

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/12534)
This commit is contained in:
Dr. David von Oheimb 2020-07-25 13:47:04 +02:00
parent 4c525cb5b6
commit ebc1e8fc4e
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
apps/insta.ca.crt Normal file
View File

Binary file not shown.

6
doc/man1/openssl-cmp.pod.in
View File

@ -991,8 +991,10 @@ to issue the following shell commands.
cd /path/to/openssl
export OPENSSL_CONF=openssl.cnf
=begin comment
wget 'http://pki.certificate.fi:8080/install-ca-cert.html/ca-certificate.crt\
?ca-id=632&download-certificate=1' -O insta.ca.crt
=end comment
openssl genrsa -out insta.priv.pem
openssl cmp -section insta
@ -1048,7 +1050,11 @@ or
Many more options can be used in the configuration file
and/or on the command line.
For instance, the B<-reqexts> CLI option may refer to a section in the
configuration file defining X.509 extensions to use in certificate requests,
such as B<v3_req> in F<openssl/apps/openssl.cnf>:
openssl cmp -section insta,cr -reqexts v3_req
=head2 Certificate enrollment