Commit 6d3d5793 authored by Hubert Kario's avatar Hubert Kario Committed by Matt Caswell
Browse files

Document -trusted_first option in man pages and help. 

Add -trusted_first description to help messages and man pages
of tools that deal with certificate verification.
parent 2d7153e8

apps/cms.c

+1 −0
Original line number Diff line number Diff line
@@ -716,6 +716,7 @@ int MAIN(int argc, char **argv) 
		BIO_printf (bio_err, "-text          include or delete text MIME headers\n");

		BIO_printf (bio_err, "-CApath dir    trusted certificates directory\n");

		BIO_printf (bio_err, "-CAfile file   trusted certificates file\n");

		BIO_printf (bio_err, "-trusted_first use locally trusted certificates first when building trust chain\n");

		BIO_printf (bio_err, "-crl_check     check revocation status of signer's certificate using CRLs\n");

		BIO_printf (bio_err, "-crl_check_all check revocation status of signer's certificate chain using CRLs\n");

#ifndef OPENSSL_NO_ENGINE

apps/ocsp.c

+1 −0
Original line number Diff line number Diff line
@@ -626,6 +626,7 @@ int MAIN(int argc, char **argv) 
		BIO_printf (bio_err, "-path              path to use in OCSP request\n");

		BIO_printf (bio_err, "-CApath dir        trusted certificates directory\n");

		BIO_printf (bio_err, "-CAfile file       trusted certificates file\n");

		BIO_printf (bio_err, "-trusted_first     use locally trusted CA's first when building trust chain\n");

		BIO_printf (bio_err, "-VAfile file       validator certificates file\n");

		BIO_printf (bio_err, "-validity_period n maximum validity discrepancy in seconds\n");

		BIO_printf (bio_err, "-status_age n      maximum status age in seconds\n");

apps/s_client.c

+1 −0
Original line number Diff line number Diff line
@@ -334,6 +334,7 @@ static void sc_usage(void) 
	BIO_printf(bio_err," -pass arg     - private key file pass phrase source\n");

	BIO_printf(bio_err," -CApath arg   - PEM format directory of CA's\n");

	BIO_printf(bio_err," -CAfile arg   - PEM format file of CA's\n");

	BIO_printf(bio_err," -trusted_first - Use local CA's first when building trust chain\n");

	BIO_printf(bio_err," -reconnect    - Drop and re-make the connection with the same Session-ID\n");

	BIO_printf(bio_err," -pause        - sleep(1) after each read(2) and write(2) system call\n");

	BIO_printf(bio_err," -showcerts    - show all certificates in the chain\n");

apps/s_server.c

+1 −0
Original line number Diff line number Diff line
@@ -526,6 +526,7 @@ static void sv_usage(void) 
	BIO_printf(bio_err," -state        - Print the SSL states\n");

	BIO_printf(bio_err," -CApath arg   - PEM format directory of CA's\n");

	BIO_printf(bio_err," -CAfile arg   - PEM format file of CA's\n");

	BIO_printf(bio_err," -trusted_first - Use locally trusted CA's first when building trust chain\n");

	BIO_printf(bio_err," -nocert       - Don't use any certificates (Anon-DH)\n");

	BIO_printf(bio_err," -cipher arg   - play with 'openssl ciphers' to see what goes here\n");

	BIO_printf(bio_err," -serverpref   - Use server's cipher preferences\n");

apps/smime.c

+1 −0
Original line number Diff line number Diff line
@@ -479,6 +479,7 @@ int MAIN(int argc, char **argv) 
		BIO_printf (bio_err, "-text          include or delete text MIME headers\n");

		BIO_printf (bio_err, "-CApath dir    trusted certificates directory\n");

		BIO_printf (bio_err, "-CAfile file   trusted certificates file\n");

		BIO_printf (bio_err, "-trusted_first use locally trusted CA's first when building trust chain\n");

		BIO_printf (bio_err, "-crl_check     check revocation status of signer's certificate using CRLs\n");

		BIO_printf (bio_err, "-crl_check_all check revocation status of signer's certificate chain using CRLs\n");

#ifndef OPENSSL_NO_ENGINE