/opt/cpanel/ea-openssl11/share/doc/openssl/html/man1/

/opt/cpanel/ea-openssl11/share/doc/openssl/html/man1

Name	Size	Mode	Actions
asn1parse.html	8419	0644	edit dl rm
ca.html	31650	0644	edit dl rm
CA.pl.html	9569	0644	edit dl rm
ciphers.html	35949	0644	edit dl rm
cms.html	30560	0644	edit dl rm
crl.html	4812	0644	edit dl rm
crl2pkcs7.html	4309	0644	edit dl rm
c_rehash.html	5813	0644	edit dl rm
dgst.html	9028	0644	edit dl rm
dhparam.html	6362	0644	edit dl rm
dsa.html	7202	0644	edit dl rm
dsaparam.html	5022	0644	edit dl rm
ec.html	8069	0644	edit dl rm
ecparam.html	7302	0644	edit dl rm
enc.html	17001	0644	edit dl rm
engine.html	4368	0644	edit dl rm
errstr.html	1929	0644	edit dl rm
gendsa.html	4129	0644	edit dl rm
genpkey.html	14114	0644	edit dl rm
genrsa.html	5275	0644	edit dl rm
list.html	3486	0644	edit dl rm
nseq.html	3341	0644	edit dl rm
ocsp.html	21358	0644	edit dl rm
openssl-asn1parse.html	8419	0644	edit dl rm
openssl-ca.html	31650	0644	edit dl rm
openssl-ciphers.html	35949	0644	edit dl rm
openssl-cms.html	30560	0644	edit dl rm
openssl-crl.html	4812	0644	edit dl rm
openssl-crl2pkcs7.html	4309	0644	edit dl rm
openssl-c_rehash.html	5813	0644	edit dl rm
openssl-dgst.html	9028	0644	edit dl rm
openssl-dhparam.html	6362	0644	edit dl rm
openssl-dsa.html	7202	0644	edit dl rm
openssl-dsaparam.html	5022	0644	edit dl rm
openssl-ec.html	8069	0644	edit dl rm
openssl-ecparam.html	7302	0644	edit dl rm
openssl-enc.html	17001	0644	edit dl rm
openssl-engine.html	4368	0644	edit dl rm
openssl-errstr.html	1929	0644	edit dl rm
openssl-gendsa.html	4129	0644	edit dl rm
openssl-genpkey.html	14114	0644	edit dl rm
openssl-genrsa.html	5275	0644	edit dl rm
openssl-list.html	3486	0644	edit dl rm
openssl-nseq.html	3341	0644	edit dl rm
openssl-ocsp.html	21358	0644	edit dl rm
openssl-passwd.html	4359	0644	edit dl rm
openssl-pkcs7.html	4314	0644	edit dl rm
openssl-pkcs8.html	13521	0644	edit dl rm
openssl-pkcs12.html	15875	0644	edit dl rm
openssl-pkey.html	6340	0644	edit dl rm
openssl-pkeyparam.html	3465	0644	edit dl rm
openssl-pkeyutl.html	14144	0644	edit dl rm
openssl-prime.html	2361	0644	edit dl rm
openssl-rand.html	3955	0644	edit dl rm
openssl-rehash.html	5813	0644	edit dl rm
openssl-req.html	28754	0644	edit dl rm
openssl-rsa.html	7927	0644	edit dl rm
openssl-rsautl.html	8045	0644	edit dl rm
openssl-sess_id.html	6128	0644	edit dl rm
openssl-smime.html	21223	0644	edit dl rm
openssl-speed.html	4059	0644	edit dl rm
openssl-spkac.html	5754	0644	edit dl rm
openssl-srp.html	2756	0644	edit dl rm
openssl-storeutl.html	4739	0644	edit dl rm
openssl-s_client.html	35485	0644	edit dl rm
openssl-s_server.html	33490	0644	edit dl rm
openssl-s_time.html	9726	0644	edit dl rm
openssl-ts.html	27227	0644	edit dl rm
openssl-tsget.html	8475	0644	edit dl rm
openssl-verify.html	32603	0644	edit dl rm
openssl-version.html	2398	0644	edit dl rm
openssl-x509.html	37404	0644	edit dl rm
openssl.html	21512	0644	edit dl rm
passwd.html	4359	0644	edit dl rm
pkcs7.html	4314	0644	edit dl rm
pkcs8.html	13521	0644	edit dl rm
pkcs12.html	15875	0644	edit dl rm
pkey.html	6340	0644	edit dl rm
pkeyparam.html	3465	0644	edit dl rm
pkeyutl.html	14144	0644	edit dl rm
prime.html	2361	0644	edit dl rm
rand.html	3955	0644	edit dl rm
rehash.html	5813	0644	edit dl rm
req.html	28754	0644	edit dl rm
rsa.html	7927	0644	edit dl rm
rsautl.html	8045	0644	edit dl rm
sess_id.html	6128	0644	edit dl rm
smime.html	21223	0644	edit dl rm
speed.html	4059	0644	edit dl rm
spkac.html	5754	0644	edit dl rm
srp.html	2756	0644	edit dl rm
storeutl.html	4739	0644	edit dl rm
s_client.html	35485	0644	edit dl rm
s_server.html	33490	0644	edit dl rm
s_time.html	9726	0644	edit dl rm
ts.html	27227	0644	edit dl rm
tsget.html	8475	0644	edit dl rm
verify.html	32603	0644	edit dl rm
version.html	2398	0644	edit dl rm
x509.html	37404	0644	edit dl rm

Edit: /opt/cpanel/ea-openssl11/share/doc/openssl/html/man1/spkac.html (5754B)

<?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>spkac</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rev="made" href="mailto:root@localhost" />
</head>

<ul id="index">
 <li><a href="#NAME">NAME</a></li>
 <li><a href="#SYNOPSIS">SYNOPSIS</a></li>
 <li><a href="#DESCRIPTION">DESCRIPTION</a></li>
 <li><a href="#OPTIONS">OPTIONS</a></li>
 <li><a href="#EXAMPLES">EXAMPLES</a></li>
 <li><a href="#NOTES">NOTES</a></li>
 <li><a href="#SEE-ALSO">SEE ALSO</a></li>
 <li><a href="#COPYRIGHT">COPYRIGHT</a></li>
</ul>

openssl-spkac, spkac - SPKAC printing and generating utility

<h1 id="SYNOPSIS">SYNOPSIS</h1>

openssl spkac [-help] [-in filename] [-out filename] [-key keyfile] [-keyform PEM|DER|ENGINE] [-passin arg] [-challenge string] [-pubkey] [-spkac spkacname] [-spksect section] [-noout] [-verify] [-engine id]

<h1 id="DESCRIPTION">DESCRIPTION</h1>

The spkac command processes Netscape signed public key and challenge (SPKAC) files. It can print out their contents, verify the signature and produce its own SPKACs from a supplied private key.

<h1 id="OPTIONS">OPTIONS</h1>

<dl>

Print out a usage message.

</dd>
<dt id="in-filename">-in filename</dt>
<dd>

This specifies the input filename to read from or standard input if this option is not specified. Ignored if the -key option is used.

</dd>
<dt id="out-filename">-out filename</dt>
<dd>

Specifies the output filename to write to or standard output by default.

</dd>
<dt id="key-keyfile">-key keyfile</dt>
<dd>

Create an SPKAC file using the private key in keyfile. The -in, -noout, -spksect and -verify options are ignored if present.

</dd>
<dt id="keyform-PEM-DER-ENGINE">-keyform PEM|DER|ENGINE</dt>
<dd>

Whether the key format is PEM, DER, or an engine-backed key. The default is PEM.

</dd>
<dt id="passin-password">-passin password</dt>
<dd>

The input file password source. For more information about the format of arg see <a href="../man1/openssl.html">&quot;Pass Phrase Options&quot; in openssl(1)</a>.

</dd>
<dt id="challenge-string">-challenge string</dt>
<dd>

Specifies the challenge string if an SPKAC is being created.

</dd>
<dt id="spkac-spkacname">-spkac spkacname</dt>
<dd>

Allows an alternative name form the variable containing the SPKAC. The default is &quot;SPKAC&quot;. This option affects both generated and input SPKAC files.

</dd>
<dt id="spksect-section">-spksect section</dt>
<dd>

Allows an alternative name form the section containing the SPKAC. The default is the default section.

</dd>
<dt id="noout">-noout</dt>
<dd>

Don&#39;t output the text version of the SPKAC (not used if an SPKAC is being created).

</dd>
<dt id="pubkey">-pubkey</dt>
<dd>

Output the public key of an SPKAC (not used if an SPKAC is being created).

</dd>
<dt id="verify">-verify</dt>
<dd>

Verifies the digital signature on the supplied SPKAC.

</dd>
<dt id="engine-id">-engine id</dt>
<dd>

Specifying an engine (by its unique id string) will cause spkac to attempt to obtain a functional reference to the specified engine, thus initialising it if needed. The engine will then be set as the default for all available algorithms.

</dd>
</dl>

<h1 id="EXAMPLES">EXAMPLES</h1>

Print out the contents of an SPKAC:

<pre><code> openssl spkac -in spkac.cnf</code></pre>

Verify the signature of an SPKAC:

<pre><code> openssl spkac -in spkac.cnf -noout -verify</code></pre>

Create an SPKAC using the challenge string &quot;hello&quot;:

<pre><code> openssl spkac -key key.pem -challenge hello -out spkac.cnf</code></pre>

Example of an SPKAC, (long lines split up for clarity):

<pre><code> SPKAC=MIG5MGUwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA\
 1cCoq2Wa3Ixs47uI7FPVwHVIPDx5yso105Y6zpozam135a\
 8R0CpoRvkkigIyXfcCjiVi5oWk+6FfPaD03uPFoQIDAQAB\
 FgVoZWxsbzANBgkqhkiG9w0BAQQFAANBAFpQtY/FojdwkJ\
 h1bEIYuc2EeM2KHTWPEepWYeawvHD0gQ3DngSC75YCWnnD\
 dq+NQ3F+X4deMx9AaEglZtULwV4=</code></pre>

<h1 id="NOTES">NOTES</h1>

A created SPKAC with suitable DN components appended can be fed into the ca utility.

SPKACs are typically generated by Netscape when a form is submitted containing the KEYGEN tag as part of the certificate enrollment process.

The challenge string permits a primitive form of proof of possession of private key. By checking the SPKAC signature and a random challenge string some guarantee is given that the user knows the private key corresponding to the public key being certified. This is important in some applications. Without this it is possible for a previous SPKAC to be used in a &quot;replay attack&quot;.

<h1 id="COPYRIGHT">COPYRIGHT</h1>

Licensed under the OpenSSL license (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.

</body>

</html>

spkac

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
EXAMPLES
NOTES
SEE ALSO
COPYRIGHT

NAME

openssl-spkac, spkac - SPKAC printing and generating utility

SYNOPSIS

openssl spkac [-help] [-in filename] [-out filename] [-key keyfile] [-keyform PEM|DER|ENGINE] [-passin arg] [-challenge string] [-pubkey] [-spkac spkacname] [-spksect section] [-noout] [-verify] [-engine id]

DESCRIPTION

The spkac command processes Netscape signed public key and challenge (SPKAC) files. It can print out their contents, verify the signature and produce its own SPKACs from a supplied private key.

OPTIONS

-help: Print out a usage message.
-in filename: This specifies the input filename to read from or standard input if this option is not specified. Ignored if the -key option is used.
-out filename: Specifies the output filename to write to or standard output by default.
-key keyfile: Create an SPKAC file using the private key in keyfile. The -in, -noout, -spksect and -verify options are ignored if present.
-keyform PEM|DER|ENGINE: Whether the key format is PEM, DER, or an engine-backed key. The default is PEM.
-passin password: The input file password source. For more information about the format of arg see "Pass Phrase Options" in openssl(1).
-challenge string: Specifies the challenge string if an SPKAC is being created.
-spkac spkacname: Allows an alternative name form the variable containing the SPKAC. The default is "SPKAC". This option affects both generated and input SPKAC files.
-spksect section: Allows an alternative name form the section containing the SPKAC. The default is the default section.
-noout: Don't output the text version of the SPKAC (not used if an SPKAC is being created).
-pubkey: Output the public key of an SPKAC (not used if an SPKAC is being created).
-verify: Verifies the digital signature on the supplied SPKAC.
-engine id: Specifying an engine (by its unique id string) will cause spkac to attempt to obtain a functional reference to the specified engine, thus initialising it if needed. The engine will then be set as the default for all available algorithms.

EXAMPLES

Print out the contents of an SPKAC:

 openssl spkac -in spkac.cnf

Verify the signature of an SPKAC:

 openssl spkac -in spkac.cnf -noout -verify

Create an SPKAC using the challenge string "hello":

 openssl spkac -key key.pem -challenge hello -out spkac.cnf

Example of an SPKAC, (long lines split up for clarity):

 SPKAC=MIG5MGUwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA\
 1cCoq2Wa3Ixs47uI7FPVwHVIPDx5yso105Y6zpozam135a\
 8R0CpoRvkkigIyXfcCjiVi5oWk+6FfPaD03uPFoQIDAQAB\
 FgVoZWxsbzANBgkqhkiG9w0BAQQFAANBAFpQtY/FojdwkJ\
 h1bEIYuc2EeM2KHTWPEepWYeawvHD0gQ3DngSC75YCWnnD\
 dq+NQ3F+X4deMx9AaEglZtULwV4=

NOTES

A created SPKAC with suitable DN components appended can be fed into the ca utility.

SPKACs are typically generated by Netscape when a form is submitted containing the KEYGEN tag as part of the certificate enrollment process.

The challenge string permits a primitive form of proof of possession of private key. By checking the SPKAC signature and a random challenge string some guarantee is given that the user knows the private key corresponding to the public key being certified. This is important in some applications. Without this it is possible for a previous SPKAC to be used in a "replay attack".

COPYRIGHT

Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at https://www.openssl.org/source/license.html.