Teil I Aufbau und Betrieb einer Zertifizierungsinstanz - DFN-CERT

242 Anhang F. Aufrufparameter und Optionen von openssl
-new - Just time new connections
-reuse - Just time connection reuse
-www page - Retrieve ’page’ from the site
-time arg - max number of seconds to collect data, default 30
-verify arg - turn on peer certificate verification, arg == depth
-cert arg - certificate file to use, PEM format assumed
-key arg - RSA file to use, PEM format assumed, key is in cert file
file if not specified by this option
-CApath arg - PEM format directory of CA’s
-CAfile arg - PEM format file of CA’s
-cipher - preferred cipher to use, play with ’openssl ciphers’
sess_id
usage: sess_id args
-inform arg - input format - default PEM (DER or PEM)
-outform arg - output format - default PEM
-in arg - input file - default stdin
-out arg - output file - default stdout
-text - print ssl session id details
-cert - output certificate
-noout - no CRL output
-context arg - set the session ID context
smime
Usage smime [options] cert.pem ...
where options are
-encrypt encrypt message
-decrypt decrypt encrypted message
-sign sign message
-verify verify signed message
-pk7out output PKCS#7 structure
-des3 encrypt with triple DES
-des encrypt with DES
-rc2-40 encrypt with RC2-40 (default)
-rc2-64 encrypt with RC2-64
-rc2-128 encrypt with RC2-128
-nointern don’t search certificates in message for signer
-nosigs don’t verify message signature
-noverify don’t verify signers certificate
-nocerts don’t include signers certificate when signing
-nodetach use opaque signing
-noattr don’t include any signed attributes
-binary don’t translate message to text
-certfile file other certificates file
-signer file signer certificate file
-recip file recipient certificate file for decryption
-in file input file
-inkey file input private key (if not signer or recipient)
-out file output file
-to addr to address
-from ad from address
-subject s subject
-text include or delete text MIME headers
-CApath dir trusted certificates directory