openssl-namedisplay-options.1ossl 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284
  1. .\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
  2. .\"
  3. .\" Standard preamble:
  4. .\" ========================================================================
  5. .de Sp \" Vertical space (when we can't use .PP)
  6. .if t .sp .5v
  7. .if n .sp
  8. ..
  9. .de Vb \" Begin verbatim text
  10. .ft CW
  11. .nf
  12. .ne \\$1
  13. ..
  14. .de Ve \" End verbatim text
  15. .ft R
  16. .fi
  17. ..
  18. .\" Set up some character translations and predefined strings. \*(-- will
  19. .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
  20. .\" double quote, and \*(R" will give a right double quote. \*(C+ will
  21. .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
  22. .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
  23. .\" nothing in troff, for use with C<>.
  24. .tr \(*W-
  25. .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
  26. .ie n \{\
  27. . ds -- \(*W-
  28. . ds PI pi
  29. . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
  30. . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
  31. . ds L" ""
  32. . ds R" ""
  33. . ds C` ""
  34. . ds C' ""
  35. 'br\}
  36. .el\{\
  37. . ds -- \|\(em\|
  38. . ds PI \(*p
  39. . ds L" ``
  40. . ds R" ''
  41. . ds C`
  42. . ds C'
  43. 'br\}
  44. .\"
  45. .\" Escape single quotes in literal strings from groff's Unicode transform.
  46. .ie \n(.g .ds Aq \(aq
  47. .el .ds Aq '
  48. .\"
  49. .\" If the F register is >0, we'll generate index entries on stderr for
  50. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  51. .\" entries marked with X<> in POD. Of course, you'll have to process the
  52. .\" output yourself in some meaningful fashion.
  53. .\"
  54. .\" Avoid warning from groff about undefined register 'F'.
  55. .de IX
  56. ..
  57. .nr rF 0
  58. .if \n(.g .if rF .nr rF 1
  59. .if (\n(rF:(\n(.g==0)) \{\
  60. . if \nF \{\
  61. . de IX
  62. . tm Index:\\$1\t\\n%\t"\\$2"
  63. ..
  64. . if !\nF==2 \{\
  65. . nr % 0
  66. . nr F 2
  67. . \}
  68. . \}
  69. .\}
  70. .rr rF
  71. .\"
  72. .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
  73. .\" Fear. Run. Save yourself. No user-serviceable parts.
  74. . \" fudge factors for nroff and troff
  75. .if n \{\
  76. . ds #H 0
  77. . ds #V .8m
  78. . ds #F .3m
  79. . ds #[ \f1
  80. . ds #] \fP
  81. .\}
  82. .if t \{\
  83. . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
  84. . ds #V .6m
  85. . ds #F 0
  86. . ds #[ \&
  87. . ds #] \&
  88. .\}
  89. . \" simple accents for nroff and troff
  90. .if n \{\
  91. . ds ' \&
  92. . ds ` \&
  93. . ds ^ \&
  94. . ds , \&
  95. . ds ~ ~
  96. . ds /
  97. .\}
  98. .if t \{\
  99. . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
  100. . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
  101. . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
  102. . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
  103. . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
  104. . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
  105. .\}
  106. . \" troff and (daisy-wheel) nroff accents
  107. .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
  108. .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
  109. .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
  110. .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
  111. .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
  112. .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
  113. .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
  114. .ds ae a\h'-(\w'a'u*4/10)'e
  115. .ds Ae A\h'-(\w'A'u*4/10)'E
  116. . \" corrections for vroff
  117. .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
  118. .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
  119. . \" for low resolution devices (crt and lpr)
  120. .if \n(.H>23 .if \n(.V>19 \
  121. \{\
  122. . ds : e
  123. . ds 8 ss
  124. . ds o a
  125. . ds d- d\h'-1'\(ga
  126. . ds D- D\h'-1'\(hy
  127. . ds th \o'bp'
  128. . ds Th \o'LP'
  129. . ds ae ae
  130. . ds Ae AE
  131. .\}
  132. .rm #[ #] #H #V #F C
  133. .\" ========================================================================
  134. .\"
  135. .IX Title "OPENSSL-NAMEDISPLAY-OPTIONS 1ossl"
  136. .TH OPENSSL-NAMEDISPLAY-OPTIONS 1ossl "2024-09-03" "3.3.2" "OpenSSL"
  137. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  138. .\" way too many mistakes in technical documents.
  139. .if n .ad l
  140. .nh
  141. .SH "NAME"
  142. openssl\-namedisplay\-options \- Distinguished name display options
  143. .SH "SYNOPSIS"
  144. .IX Header "SYNOPSIS"
  145. \&\fBopenssl\fR
  146. \&\fIcommand\fR
  147. [ \fIoptions\fR ... ]
  148. [ \fIparameters\fR ... ]
  149. .SH "DESCRIPTION"
  150. .IX Header "DESCRIPTION"
  151. OpenSSL provides fine-grain control over how the subject and issuer \s-1DN\s0's are
  152. displayed.
  153. This is specified by using the \fB\-nameopt\fR option, which takes a
  154. comma-separated list of options from the following set.
  155. An option may be preceded by a minus sign, \f(CW\*(C`\-\*(C'\fR, to turn it off.
  156. The default value is \f(CW\*(C`utf8,sep_comma_plus_space\*(C'\fR.
  157. The first four are the most commonly used.
  158. .SH "OPTIONS"
  159. .IX Header "OPTIONS"
  160. .SS "Name Format Option Arguments"
  161. .IX Subsection "Name Format Option Arguments"
  162. The \s-1DN\s0 output format can be fine tuned with the following flags.
  163. .IP "\fBcompat\fR" 4
  164. .IX Item "compat"
  165. Display the name using an old format from previous OpenSSL versions.
  166. .IP "\fB\s-1RFC2253\s0\fR" 4
  167. .IX Item "RFC2253"
  168. Display the name using the format defined in \s-1RFC 2253.\s0
  169. It is equivalent to \fBesc_2253\fR, \fBesc_ctrl\fR, \fBesc_msb\fR, \fButf8\fR,
  170. \&\fBdump_nostr\fR, \fBdump_unknown\fR, \fBdump_der\fR, \fBsep_comma_plus\fR, \fBdn_rev\fR
  171. and \fBsname\fR.
  172. .IP "\fBoneline\fR" 4
  173. .IX Item "oneline"
  174. Display the name in one line, using a format that is more readable
  175. \&\s-1RFC 2253.\s0
  176. It is equivalent to \fBesc_2253\fR, \fBesc_ctrl\fR, \fBesc_msb\fR, \fButf8\fR,
  177. \&\fBdump_nostr\fR, \fBdump_der\fR, \fBuse_quote\fR, \fBsep_comma_plus_space\fR,
  178. \&\fBspace_eq\fR and \fBsname\fR options.
  179. .IP "\fBmultiline\fR" 4
  180. .IX Item "multiline"
  181. Display the name using multiple lines.
  182. It is equivalent to \fBesc_ctrl\fR, \fBesc_msb\fR, \fBsep_multiline\fR, \fBspace_eq\fR,
  183. \&\fBlname\fR and \fBalign\fR.
  184. .IP "\fBesc_2253\fR" 4
  185. .IX Item "esc_2253"
  186. Escape the \*(L"special\*(R" characters in a field, as required by \s-1RFC 2253.\s0
  187. That is, any of the characters \f(CW\*(C`,+"<>;\*(C'\fR, \f(CW\*(C`#\*(C'\fR at the beginning of
  188. a string and leading or trailing spaces.
  189. .IP "\fBesc_2254\fR" 4
  190. .IX Item "esc_2254"
  191. Escape the \*(L"special\*(R" characters in a field as required by \s-1RFC 2254\s0 in a field.
  192. That is, the \fB\s-1NUL\s0\fR character and of \f(CW\*(C`()*\*(C'\fR.
  193. .IP "\fBesc_ctrl\fR" 4
  194. .IX Item "esc_ctrl"
  195. Escape non-printable \s-1ASCII\s0 characters, codes less than 0x20 (space)
  196. or greater than 0x7F (\s-1DELETE\s0). They are displayed using \s-1RFC 2253\s0 \f(CW\*(C`\eXX\*(C'\fR
  197. notation where \fB\s-1XX\s0\fR are the two hex digits representing the character value.
  198. .IP "\fBesc_msb\fR" 4
  199. .IX Item "esc_msb"
  200. Escape any characters with the most significant bit set, that is with
  201. values larger than 127, as described in \fBesc_ctrl\fR.
  202. .IP "\fBuse_quote\fR" 4
  203. .IX Item "use_quote"
  204. Escapes some characters by surrounding the entire string with quotation
  205. marks, \f(CW\*(C`"\*(C'\fR.
  206. Without this option, individual special characters are preceded with
  207. a backslash character, \f(CW\*(C`\e\*(C'\fR.
  208. .IP "\fButf8\fR" 4
  209. .IX Item "utf8"
  210. Convert all strings to \s-1UTF\-8\s0 format first as required by \s-1RFC 2253.\s0
  211. If the output device is \s-1UTF\-8\s0 compatible, then using this option (and
  212. not setting \fBesc_msb\fR) may give the correct display of multibyte
  213. characters.
  214. If this option is not set, then multibyte characters larger than 0xFF
  215. will be output as \f(CW\*(C`\eUXXXX\*(C'\fR for 16 bits or \f(CW\*(C`\eWXXXXXXXX\*(C'\fR for 32 bits.
  216. In addition, any UTF8Strings will be converted to their character form first.
  217. .IP "\fBignore_type\fR" 4
  218. .IX Item "ignore_type"
  219. This option does not attempt to interpret multibyte characters in any
  220. way. That is, the content octets are merely dumped as though one octet
  221. represents each character. This is useful for diagnostic purposes but
  222. will result in rather odd looking output.
  223. .IP "\fBshow_type\fR" 4
  224. .IX Item "show_type"
  225. Display the type of the \s-1ASN1\s0 character string before the value,
  226. such as \f(CW\*(C`BMPSTRING: Hello World\*(C'\fR.
  227. .IP "\fBdump_der\fR" 4
  228. .IX Item "dump_der"
  229. Any fields that would be output in hex format are displayed using
  230. the \s-1DER\s0 encoding of the field.
  231. If not set, just the content octets are displayed.
  232. Either way, the \fB#XXXX...\fR format of \s-1RFC 2253\s0 is used.
  233. .IP "\fBdump_nostr\fR" 4
  234. .IX Item "dump_nostr"
  235. Dump non-character strings, such as \s-1ASN.1\s0 \fB\s-1OCTET STRING\s0\fR.
  236. If this option is not set, then non character string types will be displayed
  237. as though each content octet represents a single character.
  238. .IP "\fBdump_all\fR" 4
  239. .IX Item "dump_all"
  240. Dump all fields. When this used with \fBdump_der\fR, this allows the
  241. \&\s-1DER\s0 encoding of the structure to be unambiguously determined.
  242. .IP "\fBdump_unknown\fR" 4
  243. .IX Item "dump_unknown"
  244. Dump any field whose \s-1OID\s0 is not recognised by OpenSSL.
  245. .IP "\fBsep_comma_plus\fR, \fBsep_comma_plus_space\fR, \fBsep_semi_plus_space\fR, \fBsep_multiline\fR" 4
  246. .IX Item "sep_comma_plus, sep_comma_plus_space, sep_semi_plus_space, sep_multiline"
  247. Specify the field separators. The first word is used between the
  248. Relative Distinguished Names (RDNs) and the second is between
  249. multiple Attribute Value Assertions (AVAs). Multiple AVAs are
  250. very rare and their use is discouraged.
  251. The options ending in \*(L"space\*(R" additionally place a space after the separator to make it more readable.
  252. The \fBsep_multiline\fR starts each field on its own line, and uses \*(L"plus space\*(R"
  253. for the \s-1AVA\s0 separator.
  254. It also indents the fields by four characters.
  255. The default value is \fBsep_comma_plus_space\fR.
  256. .IP "\fBdn_rev\fR" 4
  257. .IX Item "dn_rev"
  258. Reverse the fields of the \s-1DN\s0 as required by \s-1RFC 2253.\s0
  259. This also reverses the order of multiple AVAs in a field, but this is
  260. permissible as there is no ordering on values.
  261. .IP "\fBnofname\fR, \fBsname\fR, \fBlname\fR, \fBoid\fR" 4
  262. .IX Item "nofname, sname, lname, oid"
  263. Specify how the field name is displayed.
  264. \&\fBnofname\fR does not display the field at all.
  265. \&\fBsname\fR uses the \*(L"short name\*(R" form (\s-1CN\s0 for commonName for example).
  266. \&\fBlname\fR uses the long form.
  267. \&\fBoid\fR represents the \s-1OID\s0 in numerical form and is useful for
  268. diagnostic purpose.
  269. .IP "\fBalign\fR" 4
  270. .IX Item "align"
  271. Align field values for a more readable output. Only usable with
  272. \&\fBsep_multiline\fR.
  273. .IP "\fBspace_eq\fR" 4
  274. .IX Item "space_eq"
  275. Places spaces round the equal sign, \f(CW\*(C`=\*(C'\fR, character which follows the field
  276. name.
  277. .SH "COPYRIGHT"
  278. .IX Header "COPYRIGHT"
  279. Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved.
  280. .PP
  281. Licensed under the Apache License 2.0 (the \*(L"License\*(R"). You may not use
  282. this file except in compliance with the License. You can obtain a copy
  283. in the file \s-1LICENSE\s0 in the source distribution or at
  284. <https://www.openssl.org/source/license.html>.