X-Git-Url: https://gitweb.dragonflybsd.org/dragonfly.git/blobdiff_plain/50b33f0fa41002e8f234c952724f58dc08561fa3..aac4ff6fc8edf615df596debe627e13df2f0945e:/secure/usr.bin/openssl/man/ocsp.1

diff --git a/secure/usr.bin/openssl/man/ocsp.1 b/secure/usr.bin/openssl/man/ocsp.1
index 144382db0b..c3fdbc6bc2 100644
--- a/secure/usr.bin/openssl/man/ocsp.1
+++ b/secure/usr.bin/openssl/man/ocsp.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man 2.12 (Pod::Simple 3.05)
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.32
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -25,11 +25,11 @@
 ..
 .\" Set up some character translations and predefined strings.  \*(-- will
 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
-.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
-.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
-.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
-.\" nothing in troff, for use with C<>.
-.tr \(*W-
+.\" double quote, and \*(R" will give a right double quote.  | will give a
+.\" real vertical bar.  \*(C+ will give a nicer C++.  Capital omega is used to
+.\" do unbreakable dashes and therefore won't be available.  \*(C` and \*(C'
+.\" expand to `' in nroff, nothing in troff, for use with C<>.
+.tr \(*W-|\(bv\*(Tr
 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
 .ie n \{\
 .    ds -- \(*W-
@@ -60,6 +60,11 @@
 .    rr F
 .\}
 .\"
+.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
+.\" way too many mistakes in technical documents.
+.hy 0
+.if n .na
+.\"
 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
 .\" Fear.  Run.  Save yourself.  No user-serviceable parts.
 .    \" fudge factors for nroff and troff
@@ -124,11 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "OCSP 1"
-.TH OCSP 1 "2007-10-24" "0.9.8g" "OpenSSL"
-.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
-.\" way too many mistakes in technical documents.
-.if n .ad l
-.nh
+.TH OCSP 1 "2008-09-06" "0.9.8h" "OpenSSL"
 .SH "NAME"
 ocsp \- Online Certificate Status Protocol utility
 .SH "SYNOPSIS"
@@ -195,7 +196,7 @@ specify output filename, default is standard output.
 .IX Item "-issuer filename"
 This specifies the current issuer certificate. This option can be used
 multiple times. The certificate specified in \fBfilename\fR must be in
-\&\s-1PEM\s0 format.
+\&\s-1PEM\s0 format. This option \fB\s-1MUST\s0\fR come before any \fB\-cert\fR options.
 .IP "\fB\-cert filename\fR" 4
 .IX Item "-cert filename"
 Add the certificate \fBfilename\fR to the request. The issuer certificate
@@ -255,14 +256,14 @@ certificate from the response: this option can be used to supply the necessary
 certificate in such cases.
 .IP "\fB\-trust_other\fR" 4
 .IX Item "-trust_other"
-the certificates specified by the \fB\-verify_certs\fR option should be explicitly
+the certificates specified by the \fB\-verify_other\fR option should be explicitly
 trusted and no additional checks will be performed on them. This is useful
 when the complete responder certificate chain is not available or trusting a
 root \s-1CA\s0 is not appropriate.
 .IP "\fB\-VAfile file\fR" 4
 .IX Item "-VAfile file"
 file containing explicitly trusted responder certificates. Equivalent to the
-\&\fB\-verify_certs\fR and \fB\-trust_other\fR options.
+\&\fB\-verify_other\fR and \fB\-trust_other\fR options.
 .IP "\fB\-noverify\fR" 4
 .IX Item "-noverify"
 don't attempt to verify the \s-1OCSP\s0 response signature or the nonce values. This
@@ -272,7 +273,7 @@ of the responders certificate.
 .IX Item "-no_intern"
 ignore certificates contained in the \s-1OCSP\s0 response when searching for the
 signers certificate. With this option the signers certificate must be specified
-with either the \fB\-verify_certs\fR or \fB\-VAfile\fR options.
+with either the \fB\-verify_other\fR or \fB\-VAfile\fR options.
 .IP "\fB\-no_signature_verify\fR" 4
 .IX Item "-no_signature_verify"
 don't check the signature on the \s-1OCSP\s0 response. Since this option tolerates invalid
@@ -345,7 +346,7 @@ Port to listen for \s-1OCSP\s0 requests on. The port may also be specified using
 option.
 .IP "\fB\-nrequest number\fR" 4
 .IX Item "-nrequest number"
-The \s-1OCSP\s0 server will exit after receiving \fBnumber\fR requests, default unlimited.
+The \s-1OCSP\s0 server will exit after receiving \fBnumber\fR requests, default unlimited. 
 .IP "\fB\-nmin minutes\fR, \fB\-ndays days\fR" 4
 .IX Item "-nmin minutes, -ndays days"
 Number of minutes or days when fresh revocation information is available: used in the
@@ -389,7 +390,7 @@ multiple CAs and has its own separate certificate chain then its root
 \&\s-1CA\s0 can be trusted for \s-1OCSP\s0 signing. For example:
 .PP
 .Vb 1
-\& openssl x509 \-in ocspCA.pem \-addtrust OCSPSigning \-out trustedCA.pem
+\& openssl x509 -in ocspCA.pem -addtrust OCSPSigning -out trustedCA.pem
 .Ve
 .PP
 Alternatively the responder certificate itself can be explicitly trusted
@@ -415,49 +416,49 @@ script using the \fBrespin\fR and \fBrespout\fR options.
 Create an \s-1OCSP\s0 request and write it to a file:
 .PP
 .Vb 1
-\& openssl ocsp \-issuer issuer.pem \-cert c1.pem \-cert c2.pem \-reqout req.der
+\& openssl ocsp -issuer issuer.pem -cert c1.pem -cert c2.pem -reqout req.der
 .Ve
 .PP
 Send a query to an \s-1OCSP\s0 responder with \s-1URL\s0 http://ocsp.myhost.com/ save the 
 response to a file and print it out in text form
 .PP
 .Vb 2
-\& openssl ocsp \-issuer issuer.pem \-cert c1.pem \-cert c2.pem \e
-\&     \-url http://ocsp.myhost.com/ \-resp_text \-respout resp.der
+\& openssl ocsp -issuer issuer.pem -cert c1.pem -cert c2.pem \e
+\&     -url http://ocsp.myhost.com/ -resp_text -respout resp.der
 .Ve
 .PP
 Read in an \s-1OCSP\s0 response and print out text form:
 .PP
 .Vb 1
-\& openssl ocsp \-respin resp.der \-text
+\& openssl ocsp -respin resp.der -text
 .Ve
 .PP
 \&\s-1OCSP\s0 server on port 8888 using a standard \fBca\fR configuration, and a separate
 responder certificate. All requests and responses are printed to a file.
 .PP
 .Vb 2
-\& openssl ocsp \-index demoCA/index.txt \-port 8888 \-rsigner rcert.pem \-CA demoCA/cacert.pem
-\&        \-text \-out log.txt
+\& openssl ocsp -index demoCA/index.txt -port 8888 -rsigner rcert.pem -CA demoCA/cacert.pem
+\&        -text -out log.txt
 .Ve
 .PP
 As above but exit after processing one request:
 .PP
 .Vb 2
-\& openssl ocsp \-index demoCA/index.txt \-port 8888 \-rsigner rcert.pem \-CA demoCA/cacert.pem
-\&     \-nrequest 1
+\& openssl ocsp -index demoCA/index.txt -port 8888 -rsigner rcert.pem -CA demoCA/cacert.pem
+\&     -nrequest 1
 .Ve
 .PP
 Query status information using internally generated request:
 .PP
 .Vb 2
-\& openssl ocsp \-index demoCA/index.txt \-rsigner rcert.pem \-CA demoCA/cacert.pem
-\&     \-issuer demoCA/cacert.pem \-serial 1
+\& openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
+\&     -issuer demoCA/cacert.pem -serial 1
 .Ve
 .PP
 Query status information using request read from a file, write response to a
 second file.
 .PP
 .Vb 2
-\& openssl ocsp \-index demoCA/index.txt \-rsigner rcert.pem \-CA demoCA/cacert.pem
-\&     \-reqin req.der \-respout resp.der
+\& openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
+\&     -reqin req.der -respout resp.der
 .Ve