Commit e42d84be authored by Hubert Kario's avatar Hubert Kario Committed by Matt Caswell
Browse files

add references to verify(1) man page for args_verify() options 

cms, ocsp, s_client, s_server and smime tools also use args_verify()
for parsing options, that makes them most of the same options
verify tool does. Add those options to man pages and reference
their explanation in the verify man page.
parent 2866441a

doc/apps/cms.pod

+32 −1
Original line number Diff line number Diff line
@@ -35,7 +35,32 @@ B<openssl> B<cms> 
[B<-print>]

[B<-CAfile file>]

[B<-CApath dir>]

[B<-attime timestamp>]

[B<-check_ss_sig>]

[B<-crl_check>]

[B<-crl_check_all>]

[B<-explicit_policy>]

[B<-extended_crl>]

[B<-ignore_critical>]

[B<-inhibit_any>]

[B<-inhibit_map>]

[B<-issuer_checks>]

[B<-partial_chain>]

[B<-policy arg>]

[B<-policy_check>]

[B<-policy_print>]

[B<-purpose purpose>]

[B<-suiteB_128>]

[B<-suiteB_128_only>]

[B<-suiteB_192>]

[B<-trusted_first>]

[B<-use_deltas>]

[B<-verify_depth num>]

[B<-verify_email email>]

[B<-verify_hostname hostname>]

[B<-verify_ip ip>]

[B<-verify_name name>]

[B<-x509_strict>]

[B<-md digest>]

[B<-[cipher]>]

[B<-nointern>]
@@ -430,7 +455,13 @@ portion of a message so they may be included manually. If signing 
then many S/MIME mail clients check the signers certificate's email

address matches that specified in the From: address.



=item B<-purpose, -ignore_critical, -issuer_checks, -crl_check, -crl_check_all, -policy_check, -extended_crl, -x509_strict, -policy -check_ss_sig, -trusted_first>

=item B<-attime>, B<-check_ss_sig>, B<-crl_check>, B<-crl_check_all>,

B<explicit_policy>, B<-extended_crl>, B<-ignore_critical>, B<-inhibit_any>,

B<-inhibit_map>, B<-issuer_checks>, B<-partial_chain>, B<-policy>,

B<-policy_check>, B<-policy_print>, B<-purpose>, B<-suiteB_128>,

B<-suiteB_128_only>, B<-suiteB_192>, B<-trusted_first>, B<-use_deltas>,

B<-verify_depth>, B<-verify_email>, B<-verify_hostname>, B<-verify_ip>,

B<-verify_name>, B<-x509_strict>



Set various certificate chain valiadition options. See the

L<B<verify>|verify(1)> manual page for details.

doc/apps/ocsp.pod

+33 −2
Original line number Diff line number Diff line
@@ -29,7 +29,32 @@ B<openssl> B<ocsp> 
[B<-path>]

[B<-CApath dir>]

[B<-CAfile file>]

[B<-attime timestamp>]

[B<-check_ss_sig>]

[B<-crl_check>]

[B<-crl_check_all>]

[B<-explicit_policy>]

[B<-extended_crl>]

[B<-ignore_critical>]

[B<-inhibit_any>]

[B<-inhibit_map>]

[B<-issuer_checks>]

[B<-partial_chain>]

[B<-policy arg>]

[B<-policy_check>]

[B<-policy_print>]

[B<-purpose purpose>]

[B<-suiteB_128>]

[B<-suiteB_128_only>]

[B<-suiteB_192>]

[B<-trusted_first>]

[B<-use_deltas>]

[B<-verify_depth num>]

[B<-verify_email email>]

[B<-verify_hostname hostname>]

[B<-verify_ip ip>]

[B<-verify_name name>]

[B<-x509_strict>]

[B<-VAfile file>]

[B<-validity_period n>]

[B<-status_age n>]
@@ -139,9 +164,15 @@ or "/" by default. 
file or pathname containing trusted CA certificates. These are used to verify

the signature on the OCSP response.



=item B<-trusted_first>

=item B<-attime>, B<-check_ss_sig>, B<-crl_check>, B<-crl_check_all>,

B<explicit_policy>, B<-extended_crl>, B<-ignore_critical>, B<-inhibit_any>,

B<-inhibit_map>, B<-issuer_checks>, B<-partial_chain>, B<-policy>,

B<-policy_check>, B<-policy_print>, B<-purpose>, B<-suiteB_128>,

B<-suiteB_128_only>, B<-suiteB_192>, B<-trusted_first>, B<-use_deltas>,

B<-verify_depth>, B<-verify_email>, B<-verify_hostname>, B<-verify_ip>,

B<-verify_name>, B<-x509_strict>



Set certificate verification option.

Set different certificate verification options.

See L<B<verify>|verify(1)> manual page for details.



=item B<-verify_other file>

doc/apps/s_client.pod

+33 −1
Original line number Diff line number Diff line
@@ -19,6 +19,32 @@ B<openssl> B<s_client> 
[B<-CApath directory>]

[B<-CAfile filename>]

[B<-trusted_first>]

[B<-attime timestamp>]

[B<-check_ss_sig>]

[B<-crl_check>]

[B<-crl_check_all>]

[B<-explicit_policy>]

[B<-extended_crl>]

[B<-ignore_critical>]

[B<-inhibit_any>]

[B<-inhibit_map>]

[B<-issuer_checks>]

[B<-partial_chain>]

[B<-policy arg>]

[B<-policy_check>]

[B<-policy_print>]

[B<-purpose purpose>]

[B<-suiteB_128>]

[B<-suiteB_128_only>]

[B<-suiteB_192>]

[B<-trusted_first>]

[B<-use_deltas>]

[B<-verify_depth num>]

[B<-verify_email email>]

[B<-verify_hostname hostname>]

[B<-verify_ip ip>]

[B<-verify_name name>]

[B<-x509_strict>]

[B<-reconnect>]

[B<-pause>]

[B<-showcerts>]
@@ -117,7 +143,13 @@ also used when building the client certificate chain. 
A file containing trusted certificates to use during server authentication

and to use when attempting to build the client certificate chain.



=item B<-purpose, -ignore_critical, -issuer_checks, -crl_check, -crl_check_all, -policy_check, -extended_crl, -x509_strict, -policy -check_ss_sig, -trusted_first>

=item B<-attime>, B<-check_ss_sig>, B<-crl_check>, B<-crl_check_all>,

B<explicit_policy>, B<-extended_crl>, B<-ignore_critical>, B<-inhibit_any>,

B<-inhibit_map>, B<-issuer_checks>, B<-partial_chain>, B<-policy>,

B<-policy_check>, B<-policy_print>, B<-purpose>, B<-suiteB_128>,

B<-suiteB_128_only>, B<-suiteB_192>, B<-trusted_first>, B<-use_deltas>,

B<-verify_depth>, B<-verify_email>, B<-verify_hostname>, B<-verify_ip>,

B<-verify_name>, B<-x509_strict>



Set various certificate chain valiadition options. See the

L<B<verify>|verify(1)> manual page for details.

doc/apps/s_server.pod

+30 −2
Original line number Diff line number Diff line
@@ -34,7 +34,30 @@ B<openssl> B<s_server> 
[B<-state>]

[B<-CApath directory>]

[B<-CAfile filename>]

[B<-attime timestamp>]

[B<-check_ss_sig>]

[B<-explicit_policy>]

[B<-extended_crl>]

[B<-ignore_critical>]

[B<-inhibit_any>]

[B<-inhibit_map>]

[B<-issuer_checks>]

[B<-partial_chain>]

[B<-policy arg>]

[B<-policy_check>]

[B<-policy_print>]

[B<-purpose purpose>]

[B<-suiteB_128>]

[B<-suiteB_128_only>]

[B<-suiteB_192>]

[B<-trusted_first>]

[B<-use_deltas>]

[B<-verify_depth num>]

[B<-verify_email email>]

[B<-verify_hostname hostname>]

[B<-verify_ip ip>]

[B<-verify_name name>]

[B<-x509_strict>]

[B<-nocert>]

[B<-cipher cipherlist>]

[B<-quiet>]
@@ -184,9 +207,14 @@ and to use when attempting to build the server certificate chain. The list 
is also used in the list of acceptable client CAs passed to the client when

a certificate is requested.



=item B<-trusted_first>

=item B<-attime>, B<-check_ss_sig>, B<explicit_policy>, B<-extended_crl>,

B<-ignore_critical>, B<-inhibit_any>, B<-inhibit_map>, B<-issuer_checks>,

B<-partial_chain>, B<-policy>, B<-policy_check>, B<-policy_print>, B<-purpose>,

B<-suiteB_128>, B<-suiteB_128_only>, B<-suiteB_192>, B<-trusted_first>,

B<-use_deltas>, B<-verify_depth>, B<-verify_email>, B<-verify_hostname>,

B<-verify_ip>, B<-verify_name>, B<-x509_strict>



Set certificate verification option.

Set different peer certificate verification options.

See the L<B<verify>|verify(1)> manual page for details.



=item B<-state>

doc/apps/smime.pod

+32 −1
Original line number Diff line number Diff line
@@ -17,7 +17,32 @@ B<openssl> B<smime> 
[B<-in file>]

[B<-CAfile file>]

[B<-CApath dir>]

[B<-attime timestamp>]

[B<-check_ss_sig>]

[B<-crl_check>]

[B<-crl_check_all>]

[B<-explicit_policy>]

[B<-extended_crl>]

[B<-ignore_critical>]

[B<-inhibit_any>]

[B<-inhibit_map>]

[B<-issuer_checks>]

[B<-partial_chain>]

[B<-policy arg>]

[B<-policy_check>]

[B<-policy_print>]

[B<-purpose purpose>]

[B<-suiteB_128>]

[B<-suiteB_128_only>]

[B<-suiteB_192>]

[B<-trusted_first>]

[B<-use_deltas>]

[B<-verify_depth num>]

[B<-verify_email email>]

[B<-verify_hostname hostname>]

[B<-verify_ip ip>]

[B<-verify_name name>]

[B<-x509_strict>]

[B<-certfile file>]

[B<-signer file>]

[B<-recip  file>]
@@ -262,7 +287,13 @@ portion of a message so they may be included manually. If signing 
then many S/MIME mail clients check the signers certificate's email

address matches that specified in the From: address.



=item B<-purpose, -ignore_critical, -issuer_checks, -crl_check, -crl_check_all, -policy_check, -extended_crl, -x509_strict, -policy -check_ss_sig, -trusted_first>

=item B<-attime>, B<-check_ss_sig>, B<-crl_check>, B<-crl_check_all>,

B<explicit_policy>, B<-extended_crl>, B<-ignore_critical>, B<-inhibit_any>,

B<-inhibit_map>, B<-issuer_checks>, B<-partial_chain>, B<-policy>,

B<-policy_check>, B<-policy_print>, B<-purpose>, B<-suiteB_128>,

B<-suiteB_128_only>, B<-suiteB_192>, B<-trusted_first>, B<-use_deltas>,

B<-verify_depth>, B<-verify_email>, B<-verify_hostname>, B<-verify_ip>,

B<-verify_name>, B<-x509_strict>



Set various options of certificate chain verification. See

L<B<verify>|verify(1)> manual page for details.