version 1.53, 2016/08/16 06:40:24 |
version 1.54, 2016/08/18 12:07:21 |
|
|
This must be the last option specified. |
This must be the last option specified. |
The default is 2048. |
The default is 2048. |
.El |
.El |
.\" |
|
.\" NSEQ |
|
.\" |
|
.Sh NSEQ |
.Sh NSEQ |
.Nm openssl nseq |
.Nm openssl nseq |
.Op Fl in Ar file |
.Op Fl in Ar file |
|
|
.Pp |
.Pp |
The |
The |
.Nm nseq |
.Nm nseq |
command takes a file containing a Netscape certificate |
command takes a file containing a Netscape certificate sequence |
sequence and prints out the certificates contained in it or takes a |
(an alternative to the standard PKCS#7 format) |
file of certificates and converts it into a Netscape certificate |
and prints out the certificates contained in it, |
sequence. |
or takes a file of certificates |
|
and converts it into a Netscape certificate sequence. |
.Pp |
.Pp |
|
The PEM-encoded form uses the same headers and footers as a certificate: |
|
.Bd -unfilled -offset indent |
|
-----BEGIN CERTIFICATE----- |
|
-----END CERTIFICATE----- |
|
.Ed |
|
.Pp |
The options are as follows: |
The options are as follows: |
.Bl -tag -width Ds |
.Bl -tag -width Ds |
.It Fl in Ar file |
.It Fl in Ar file |
This specifies the input |
The input file to read from, |
.Ar file |
or standard input if not specified. |
to read, or standard input if this option is not specified. |
|
.It Fl out Ar file |
.It Fl out Ar file |
Specifies the output |
The output file to write to, |
.Ar file , |
or standard output if not specified. |
or standard output by default. |
|
.It Fl toseq |
.It Fl toseq |
Normally, a Netscape certificate sequence will be input and the output |
Normally, a Netscape certificate sequence will be input and the output |
is the certificates contained in it. |
is the certificates contained in it. |
|
|
option the situation is reversed: |
option the situation is reversed: |
a Netscape certificate sequence is created from a file of certificates. |
a Netscape certificate sequence is created from a file of certificates. |
.El |
.El |
.Sh NSEQ EXAMPLES |
|
Output the certificates in a Netscape certificate sequence: |
|
.Bd -literal -offset indent |
|
$ openssl nseq -in nseq.pem -out certs.pem |
|
.Ed |
|
.Pp |
|
Create a Netscape certificate sequence: |
|
.Bd -literal -offset indent |
|
$ openssl nseq -in certs.pem -toseq -out nseq.pem |
|
.Ed |
|
.Sh NSEQ NOTES |
|
The PEM-encoded form uses the same headers and footers as a certificate: |
|
.Bd -unfilled -offset indent |
|
-----BEGIN CERTIFICATE----- |
|
-----END CERTIFICATE----- |
|
.Ed |
|
.Pp |
|
A Netscape certificate sequence is a Netscape specific form that can be sent |
|
to browsers as an alternative to the standard PKCS#7 format when several |
|
certificates are sent to the browser: |
|
for example during certificate enrollment. |
|
It is used by the Netscape certificate server, for example. |
|
.Sh NSEQ BUGS |
|
This program needs a few more options, |
|
like allowing DER or PEM input and output files |
|
and allowing multiple certificate files to be used. |
|
.\" |
.\" |
.\" OCSP |
.\" OCSP |
.\" |
.\" |