From: Dr. David von Oheimb <David.von.Oheimb@siemens.com>
Date: Sat, 25 Jul 2020 11:47:04 +0000 (+0200)
Subject: openssl-cmp.pod.in: Update and extend example using Insta Demo CA
X-Git-Tag: openssl-3.0.0-alpha6~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ebc1e8fc4ec2888fdb99d487c064d8ef586f3ee3;p=thirdparty%2Fopenssl.git

openssl-cmp.pod.in: Update and extend example using Insta Demo CA

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/12534)
---

diff --git a/apps/insta.ca.crt b/apps/insta.ca.crt
new file mode 100644
index 00000000000..6aea6d4f979
Binary files /dev/null and b/apps/insta.ca.crt differ
diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in
index 45355cbdb32..8d3e686b552 100644
--- a/doc/man1/openssl-cmp.pod.in
+++ b/doc/man1/openssl-cmp.pod.in
@@ -991,8 +991,10 @@ to issue the following shell commands.
 
   cd /path/to/openssl
   export OPENSSL_CONF=openssl.cnf
+=begin comment
   wget 'http://pki.certificate.fi:8080/install-ca-cert.html/ca-certificate.crt\
         ?ca-id=632&download-certificate=1' -O insta.ca.crt
+=end comment
   openssl genrsa -out insta.priv.pem
   openssl cmp -section insta
 
@@ -1048,7 +1050,11 @@ or
 
 Many more options can be used in the configuration file
 and/or on the command line.
+For instance, the B<-reqexts> CLI option may refer to a section in the
+configuration file defining X.509 extensions to use in certificate requests,
+such as B<v3_req> in F<openssl/apps/openssl.cnf>:
 
+  openssl cmp -section insta,cr -reqexts v3_req
 
 =head2 Certificate enrollment