Commit 89a99cd5 authored by Rich Salz's avatar Rich Salz
Browse files

Warn if -days without -x509 



Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4692)
parent 1c47d35a

apps/req.c

+2 −0
Original line number Diff line number Diff line
@@ -333,6 +333,8 @@ int req_main(int argc, char **argv) 
    if (argc != 0)

        goto opthelp;



    if (days && !x509)

        BIO_printf(bio_err, "Ignoring -days; not generating a certificate");

    if (x509 && infile == NULL)

        newreq = 1;

doc/man1/req.pod

+2 −1
Original line number Diff line number Diff line
@@ -247,7 +247,8 @@ to the self signed certificate otherwise new request is created. 
=item B<-days n>



When the B<-x509> option is being used this specifies the number of

days to certify the certificate for. The default is 30 days.

days to certify the certificate for, otherwise it is ignored.

The default is 30 days.



=item B<-set_serial n>