| Index: openssl/doc/apps/dgst.pod
|
| ===================================================================
|
| --- openssl/doc/apps/dgst.pod (revision 105093)
|
| +++ openssl/doc/apps/dgst.pod (working copy)
|
| @@ -14,6 +14,7 @@
|
| [B<-binary>]
|
| [B<-out filename>]
|
| [B<-sign filename>]
|
| +[B<-keyform arg>]
|
| [B<-passin arg>]
|
| [B<-verify filename>]
|
| [B<-prverify filename>]
|
| @@ -61,6 +62,23 @@
|
|
|
| digitally sign the digest using the private key in "filename".
|
|
|
| +=item B<-keyform arg>
|
| +
|
| +Specifies the key format to sign digest with. Only PEM and ENGINE
|
| +formats are supported by the B<dgst> command.
|
| +
|
| +=item B<-engine id>
|
| +
|
| +Use engine B<id> for operations (including private key storage).
|
| +This engine is not used as source for digest algorithms, unless it is
|
| +also specified in the configuration file.
|
| +
|
| +=item B<-sigopt nm:v>
|
| +
|
| +Pass options to the signature algorithm during sign or verify operations.
|
| +Names and values of these options are algorithm-specific.
|
| +
|
| +
|
| =item B<-passin arg>
|
|
|
| the private key password source. For more information about the format of B<arg>
|
| @@ -83,6 +101,35 @@
|
|
|
| create a hashed MAC using "key".
|
|
|
| +=item B<-mac alg>
|
| +
|
| +create MAC (keyed Message Authentication Code). The most popular MAC
|
| +algorithm is HMAC (hash-based MAC), but there are other MAC algorithms
|
| +which are not based on hash, for instance B<gost-mac> algorithm,
|
| +supported by B<ccgost> engine. MAC keys and other options should be set
|
| +via B<-macopt> parameter.
|
| +
|
| +=item B<-macopt nm:v>
|
| +
|
| +Passes options to MAC algorithm, specified by B<-mac> key.
|
| +Following options are supported by both by B<HMAC> and B<gost-mac>:
|
| +
|
| +=over 8
|
| +
|
| +=item B<key:string>
|
| +
|
| +Specifies MAC key as alphnumeric string (use if key contain printable
|
| +characters only). String length must conform to any restrictions of
|
| +the MAC algorithm for example exactly 32 chars for gost-mac.
|
| +
|
| +=item B<hexkey:string>
|
| +
|
| +Specifies MAC key in hexadecimal form (two hex digits per byte).
|
| +Key length must conform to any restrictions of the MAC algorithm
|
| +for example exactly 32 chars for gost-mac.
|
| +
|
| +=back
|
| +
|
| =item B<-rand file(s)>
|
|
|
| a file or files containing random data used to seed the random number
|
|
|