diff options
Diffstat (limited to 'doc/invoke-certtool.texi')
| -rw-r--r-- | doc/invoke-certtool.texi | 64 |
1 files changed, 40 insertions, 24 deletions
diff --git a/doc/invoke-certtool.texi b/doc/invoke-certtool.texi index f6749458a6..f0071565d1 100644 --- a/doc/invoke-certtool.texi +++ b/doc/invoke-certtool.texi @@ -6,7 +6,7 @@ # # DO NOT EDIT THIS FILE (invoke-certtool.texi) # -# It has been AutoGen-ed December 16, 2013 at 01:40:32 PM by AutoGen 5.18 +# It has been AutoGen-ed January 24, 2014 at 07:12:17 PM by AutoGen 5.18.2 # From the definitions ../src/certtool-args.def # and the template file agtexi-cmd.tpl @end ignore @@ -93,23 +93,23 @@ Usage: certtool [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]... - requires the option 'load-certificate' --to-p8 Generate a PKCS #8 structure -8, --pkcs8 Use PKCS #8 format for private keys - --rsa Generate RSA key - --dsa Generate DSA key - --ecc Generate ECC (ECDSA) key - --ecdsa an alias for the 'ecc' option - --hash=str Hash algorithm to use for signing. - --inder Use DER format for input certificates and private keys. + -!, --rsa Generate RSA key + -", --dsa Generate DSA key + -#, --ecc Generate ECC (ECDSA) key + -$, --ecdsa an alias for the 'ecc' option + -%, --hash=str Hash algorithm to use for signing. + -&, --inder Use DER format for input certificates and private keys. - disabled as '--no-inder' - --inraw an alias for the 'inder' option - --outder Use DER format for output certificates and private keys + -', --inraw an alias for the 'inder' option + -(, --outder Use DER format for output certificates and private keys - disabled as '--no-outder' - --outraw an alias for the 'outder' option - --bits=num Specify the number of bits for key generate - --sec-param=str Specify the security level [low, legacy, normal, high, ultra]. - --disable-quick-random No effect - --template=file Template file to use for non-interactive operation + -), --outraw an alias for the 'outder' option + -*, --bits=num Specify the number of bits for key generate + -+, --sec-param=str Specify the security level [low, legacy, normal, high, ultra]. + -,, --disable-quick-random No effect + --, --template=file Template file to use for non-interactive operation - file must pre-exist - --pkcs-cipher=str Cipher to use for PKCS #8 and #12 operations + -., --pkcs-cipher=str Cipher to use for PKCS #8 and #12 operations -v, --version[=arg] output version information and exit -h, --help display extended usage information and exit -!, --more-help extended usage information passed thru pager @@ -129,7 +129,7 @@ Please send bug reports to: <bugs@@gnutls.org> @subsubheading debug option (-d) This is the ``enable debugging.'' option. -This option takes an argument number. +This option takes a number argument. Specifies the debug level. @anchor{certtool generate-request} @subsubheading generate-request option (-q) @@ -188,31 +188,31 @@ are more efficient since GnuTLS 3.0.9. @subsubheading load-privkey option This is the ``loads a private key file'' option. -This option takes an argument string. +This option takes a string argument. This can be either a file or a PKCS #11 URL @anchor{certtool load-pubkey} @subsubheading load-pubkey option This is the ``loads a public key file'' option. -This option takes an argument string. +This option takes a string argument. This can be either a file or a PKCS #11 URL @anchor{certtool load-certificate} @subsubheading load-certificate option This is the ``loads a certificate file'' option. -This option takes an argument string. +This option takes a string argument. This can be either a file or a PKCS #11 URL @anchor{certtool load-ca-privkey} @subsubheading load-ca-privkey option This is the ``loads the certificate authority's private key file'' option. -This option takes an argument string. +This option takes a string argument. This can be either a file or a PKCS #11 URL @anchor{certtool load-ca-certificate} @subsubheading load-ca-certificate option This is the ``loads the certificate authority's certificate file'' option. -This option takes an argument string. +This option takes a string argument. This can be either a file or a PKCS #11 URL @anchor{certtool cprint} @subsubheading cprint option @@ -268,12 +268,20 @@ This is an alias for the @code{ecc} option, @subsubheading hash option This is the ``hash algorithm to use for signing.'' option. -This option takes an argument string. +This option takes a string argument. Available hash functions are SHA1, RMD160, SHA256, SHA384, SHA512. @anchor{certtool inder} @subsubheading inder option This is the ``use der format for input certificates and private keys.'' option. + +@noindent +This option has some usage constraints. It: +@itemize @bullet +@item +can be disabled with --no-inder. +@end itemize + The input files will be assumed to be in DER or RAW format. Unlike options that in PEM input would allow multiple input data (e.g. multiple certificates), when reading in DER format a single data structure is read. @@ -287,6 +295,14 @@ This is an alias for the @code{inder} option, @subsubheading outder option This is the ``use der format for output certificates and private keys'' option. + +@noindent +This option has some usage constraints. It: +@itemize @bullet +@item +can be disabled with --no-outder. +@end itemize + The output will be in DER or RAW format. @anchor{certtool outraw} @subsubheading outraw option @@ -298,13 +314,13 @@ This is an alias for the @code{outder} option, @subsubheading sec-param option This is the ``specify the security level [low, legacy, normal, high, ultra].'' option. -This option takes an argument string @file{Security parameter}. +This option takes a string argument @file{Security parameter}. This is alternative to the bits option. @anchor{certtool pkcs-cipher} @subsubheading pkcs-cipher option This is the ``cipher to use for pkcs #8 and #12 operations'' option. -This option takes an argument string @file{Cipher}. +This option takes a string argument @file{Cipher}. Cipher may be one of 3des, 3des-pkcs12, aes-128, aes-192, aes-256, rc2-40, arcfour. @anchor{certtool exit status} @subsubheading certtool exit status |