version 1.133, 2016/06/16 06:10:45 |
version 1.134, 2017/04/29 04:12:25 |
|
|
.Ar address_list |
.Ar address_list |
is a comma-separated list of one or more address/netmask pairs in CIDR |
is a comma-separated list of one or more address/netmask pairs in CIDR |
format. |
format. |
|
.It Ic extension Ns : Ns Ar name Ns Op Ns = Ns Ar contents |
|
Includes an arbitrary certificate extension. |
|
.It Ic critical Ns : Ns Ar name Ns Op Ns = Ns Ar contents |
|
Includes an arbitrary certificate critical option. |
.El |
.El |
.Pp |
.Pp |
At present, no options are valid for host keys. |
At present, no standard options are valid for host keys. |
|
.Pp |
|
For non-standard certificate extension or options included using |
|
.Ic extension |
|
or |
|
.Ic option , |
|
the specified |
|
.Ar name |
|
should include a domain suffix, e.g. |
|
.Dq name@example.com . |
|
If a |
|
.Ar contents |
|
is specified then it is included as the contents of the extension/option |
|
encoded as a string, otherwise the extension/option is created with no |
|
contents (usually indicating a flag). |
|
Extensions may be ignored by a client or server that does not recognise them, |
|
whereas unknown critical options will cause the certificate to be refused. |
.It Fl o |
.It Fl o |
Causes |
Causes |
.Nm |
.Nm |