Lines Matching refs:option
29 [B<-certopt> I<option>]
117 This option cannot be combined with the B<-new> flag.
130 Instead, the B<-set_subject> option needs to be given.
131 The public key to include can be given with the B<-force_pubkey> option
132 and defaults to the key given with the B<-key> (or B<-signkey>) option,
138 The B<-key> (or B<-signkey>) option must be used to provide the private key for
142 X.509 extensions to be added can be specified using the B<-extfile> option.
147 With this option a PKCS#10 certificate request is expected instead,
151 X.509 extensions to be added can be specified using the B<-extfile> option.
156 when converting from a certificate to a request using the B<-x509toreq> option
157 or converting from a request to a certificate using the B<-req> option.
158 If I<arg> is B<none> or this option is not present then extensions are ignored.
163 The B<-ext> option can be used to further restrict which extensions to copy.
177 This option provides the private key for signing a new certificate or
182 This option cannot be used in conjunction with the B<-CA> option.
185 Unless the B<-preserve_dates> option is supplied,
187 and the end date to a value determined by the B<-days> option.
193 This option is an alias of B<-key>.
215 This option prevents output except for printing as requested by below options.
237 =item B<-certopt> I<option>
239 Customise the print format used with B<-text>. The I<option> argument
240 can be a single option or multiple options separated by commas.
328 This option performs tests on the certificate extensions and outputs
338 This option prints out the value of the modulus of the public key
373 This option can be used with the B<-key>, B<-signkey>, or B<-CA> options.
374 If used in conjunction with the B<-CA> option
375 the serial number file (as specified by the B<-CAserial> option) is not used.
391 Cannot be used together with the B<-preserve_dates> option.
401 Cannot be used together with the B<-preserve_dates> option.
402 This overrides the option B<-days>.
409 Cannot be used together with the option B<-preserve_dates>.
410 If option B<-not_after> is set, the explicit expiry date takes precedence.
428 unless the B<-set_issuer> option is given.
441 This option can be used with the B<-new> and B<-force_pubkey> options to create
446 This option is an alias of B<-set_subject>.
453 or given with the B<-key> (or B<-signkey>) option.
456 This option can be used in conjunction with b<-new> and B<-set_subject>
459 This option is also useful for creating self-issued certificates that are not
468 the B<-clrext> option prevents taking over any extensions from the source.
479 If this option is not
493 This option may be given multiple times.
494 Names and values provided using this option are algorithm-specific.
504 This affects any signing or printing option that uses a message
523 This option cannot be used in conjunction with B<-key> (or B<-signkey>).
524 This option is normally combined with the B<-req> option referencing a CSR.
525 Without the B<-req> option the input must be an existing certificate
526 unless the B<-new> option is given, which generates a certificate from scratch.
537 If this option is not provided then the key must be present in the B<-CA> input.
548 When creating a certificate with this option and with the B<-CA> option,
559 If the B<-CA> option is specified and neither <-CAserial> or <-CAcreateserial>
565 With this option and the B<-CA> option
600 With the B<-trustout> option a trusted certificate is output. A trusted
628 It accepts the same values as the B<-addtrust> option.
647 customise the actual fields printed using the B<certopt> option when
648 the B<text> option is present. The default behaviour is to print all fields.
796 The B<-email> option searches the subject name and the subject alternative
827 The B<-signkey> option has been renamed to B<-key> in OpenSSL 3.0,
830 The B<-engine> option was deprecated in OpenSSL 3.0.
832 The B<-C> option was removed in OpenSSL 3.0.
