Thu Apr 28 17:14:45 2011 UTC ()
New sentence, new line.


(wiz)
diff -r1.5 -r1.6 src/usr.bin/nbsvtool/nbsvtool.1

cvs diff -r1.5 -r1.6 src/usr.bin/nbsvtool/nbsvtool.1 (expand / switch to unified diff)

--- src/usr.bin/nbsvtool/nbsvtool.1 2009/03/11 13:54:20 1.5
+++ src/usr.bin/nbsvtool/nbsvtool.1 2011/04/28 17:14:45 1.6
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1.\" $NetBSD: nbsvtool.1,v 1.5 2009/03/11 13:54:20 joerg Exp $ 1.\" $NetBSD: nbsvtool.1,v 1.6 2011/04/28 17:14:45 wiz Exp $
2.\" 2.\"
3.\" Copyright (c) 2004-2008 The NetBSD Foundation, Inc. 3.\" Copyright (c) 2004-2008 The NetBSD Foundation, Inc.
4.\" All rights reserved. 4.\" All rights reserved.
5.\" 5.\"
6.\" This code is derived from software contributed to The NetBSD Foundation 6.\" This code is derived from software contributed to The NetBSD Foundation
7.\" by Love Hörnquist Åstrand <lha@it.su.se> 7.\" by Love Hörnquist Åstrand <lha@it.su.se>
8.\" 8.\"
9.\" Redistribution and use in source and binary forms, with or without 9.\" Redistribution and use in source and binary forms, with or without
10.\" modification, are permitted provided that the following conditions 10.\" modification, are permitted provided that the following conditions
11.\" are met: 11.\" are met:
12.\" 1. Redistributions of source code must retain the above copyright 12.\" 1. Redistributions of source code must retain the above copyright
13.\" notice, this list of conditions and the following disclaimer. 13.\" notice, this list of conditions and the following disclaimer.
14.\" 2. Redistributions in binary form must reproduce the above copyright 14.\" 2. Redistributions in binary form must reproduce the above copyright
@@ -118,27 +118,27 @@ for file @@ -118,27 +118,27 @@ for file
118The private key is found in file 118The private key is found in file
119.Pa key , 119.Pa key ,
120the matching certificate is in 120the matching certificate is in
121.Pa cert , 121.Pa cert ,
122additional certificates from 122additional certificates from
123.Pa cert-chain 123.Pa cert-chain
124are included in the created signature. 124are included in the created signature.
125.Dl nbsvtool -k key -f cert -c cert-chain sign hello hello.sp7 125.Dl nbsvtool -k key -f cert -c cert-chain sign hello hello.sp7
126.Pp 126.Pp
127Verify that the signature 127Verify that the signature
128.Pa hello.sp7 128.Pa hello.sp7
129is valid for file 129is valid for file
130.Pa hello 130.Pa hello
131and that the signing certificate allows code signing. Certificates 131and that the signing certificate allows code signing.
132in 132Certificates in
133.Pa anchor-file 133.Pa anchor-file
134are considered trusted, and there must be a certificate chain from one 134are considered trusted, and there must be a certificate chain from one
135of those certificates to the signing certificate. 135of those certificates to the signing certificate.
136.Dl nbsvtool -a anchor-file verify-code hello hello.sp7 136.Dl nbsvtool -a anchor-file verify-code hello hello.sp7
137.Sh SEE ALSO 137.Sh SEE ALSO
138.Xr openssl_smime 1 138.Xr openssl_smime 1
139.\" XXX: pointer to X509 documentation, CA setup 139.\" XXX: pointer to X509 documentation, CA setup
140.Sh CAVEATS 140.Sh CAVEATS
141As there is currently no default trust anchor, you must explicilty 141As there is currently no default trust anchor, you must explicilty
142specify one with 142specify one with
143.Fl a , 143.Fl a ,
144otherwise no verification can succeed. 144otherwise no verification can succeed.