From 89a99cd589d69d3861afa8865986e2d98afb979a Mon Sep 17 00:00:00 2001 From: Rich Salz Date: Tue, 7 Nov 2017 07:04:21 -0500 Subject: [PATCH] Warn if -days without -x509 Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/4692) --- apps/req.c | 2 ++ doc/man1/req.pod | 3 ++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/apps/req.c b/apps/req.c index dab67a0534..79425e5939 100644 --- a/apps/req.c +++ b/apps/req.c @@ -333,6 +333,8 @@ int req_main(int argc, char **argv) if (argc != 0) goto opthelp; + if (days && !x509) + BIO_printf(bio_err, "Ignoring -days; not generating a certificate"); if (x509 && infile == NULL) newreq = 1; diff --git a/doc/man1/req.pod b/doc/man1/req.pod index 7a490983d5..d0d471f11f 100644 --- a/doc/man1/req.pod +++ b/doc/man1/req.pod @@ -247,7 +247,8 @@ to the self signed certificate otherwise new request is created. =item B<-days n> When the B<-x509> option is being used this specifies the number of -days to certify the certificate for. The default is 30 days. +days to certify the certificate for, otherwise it is ignored. +The default is 30 days. =item B<-set_serial n> -- 2.40.0