From: Dr. David von Oheimb Date: Tue, 15 Mar 2022 17:39:13 +0000 (+0100) Subject: OSSL_CMP_MSG_get0_header.pod: re-phrase two lenthy otherwise clauses as lists X-Git-Tag: openssl-3.2.0-alpha1~2832 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=52a42f54eb9afb599d32c85100d59db46c23ffcc;p=thirdparty%2Fopenssl.git OSSL_CMP_MSG_get0_header.pod: re-phrase two lenthy otherwise clauses as lists Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/17887) --- diff --git a/doc/man3/OSSL_CMP_MSG_get0_header.pod b/doc/man3/OSSL_CMP_MSG_get0_header.pod index 1fedde84843..6bc0d261880 100644 --- a/doc/man3/OSSL_CMP_MSG_get0_header.pod +++ b/doc/man3/OSSL_CMP_MSG_get0_header.pod @@ -40,19 +40,34 @@ from various information provided in the CMP context argument I for inclusion in a CMP request message based on details contained in I. The I argument defines the request identifier to use, which typically is 0. -The subject DN to include in the certificate template is determined as follows. -If I includes a subject name set via L, -this name is used. -Otherwise, if a PKCS#10 CSR is given in I, its subject is used. -Otherwise, if a reference certificate is given in I -(see L), its subject is used if I -is nonzero or the I does not include a Subject Alternative Name. - -The public key to include is taken from any value set via -L, -otherwise the public key of any PKCS#10 CSR is given in I, -otherwise the public key of any reference certificate given in I, -otherwise it is derived from the client private key if given in I. +The subject DN included in the certificate template is +the first available value of these: + +=over 4 + +=item any subject name in I set via L, + +=item the subject field of any PKCS#10 CSR is given in I, or + +=item the subject field of any reference certificate given in I +(see L), if I is nonzero +or the I does not include a Subject Alternative Name. + +=back + +The public key included is the first available value of these: + +=over 4 + +=item the public key derived from any key set via L, + +=item the public key of any PKCS#10 CSR is given in I, + +=item the public key of any reference certificate given in I, or + +=item the public key derived from any client private key set via L. + +=back The set of X.509 extensions to include is computed as follows. If a PKCS#10 CSR is present in I, default extensions are taken from there,