openssl-crl(1): The -verify option is implied by -CA* options

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/24024)

diff --git a/doc/man1/openssl-crl.pod.in b/doc/man1/openssl-crl.pod.in
index 630c15dab5a0039ace7683907e0be45dc293804f..cbc8c044c72fec7c486498d78ccc5e1bd7a1e4d5 100644 (file)
--- a/doc/man1/openssl-crl.pod.in
+++ b/doc/man1/openssl-crl.pod.in
@@ -97,6 +97,9 @@ Verify the signature in the CRL. If the verification fails,
 the program will immediately exit, i.e. further option processing
 (e.g. B<-gendelta>) is skipped.
 
+This option is implicitly enabled if any of B<-CApath>, B<-CAfile>
+or B<-CAstore> is specified.
+
 =item B<-noout>
 
 Don't output the encoded version of the CRL.