summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2013-08-21 13:39:27 +0100
committerDr. Stephen Henson <steve@openssl.org>2013-08-21 13:43:00 +0100
commit902efde1cca5910703af57cfc9b5e0fb7980f5b6 (patch)
treeaeed2cdf0d65364435ce5a810829ae06d866fbb1
parent36019f70e816587a5a250c9ac62d008273fad077 (diff)
downloadopenssl-new-902efde1cca5910703af57cfc9b5e0fb7980f5b6.tar.gz
Document -force_pubkey option.
-rw-r--r--doc/apps/x509.pod10
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/apps/x509.pod b/doc/apps/x509.pod
index d2d9eb812a..19fae07e48 100644
--- a/doc/apps/x509.pod
+++ b/doc/apps/x509.pod
@@ -48,6 +48,7 @@ B<openssl> B<x509>
[B<-CAkey filename>]
[B<-CAcreateserial>]
[B<-CAserial filename>]
+[B<-force_pubkey key>]
[B<-text>]
[B<-C>]
[B<-md2|-md5|-sha1|-mdc2>]
@@ -400,6 +401,15 @@ specified then the extensions should either be contained in the unnamed
L<x509v3_config(5)|x509v3_config(5)> manual page for details of the
extension section format.
+=item B<-force_pubkey key>
+
+when a certificate is created set its public key to B<key> instead of the
+key in the certificate or certificate request. This option is useful for
+creating certificates where the algorithm can't normally sign requests, for
+example DH.
+
+The format or B<key> can be specified using the B<-keyform> option.
+
=back
=head2 NAME OPTIONS