summaryrefslogtreecommitdiff
path: root/src/certtool-args.def
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2015-09-12 16:18:10 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2015-09-12 16:22:48 +0200
commit9e8cf6ef4523a9e54475b796de6b0b9949b17751 (patch)
tree0d489b6c9154b7dbe31088b8e1159206a1244d42 /src/certtool-args.def
parent6c8702587943c426e06d5b545af4f143ae17c670 (diff)
downloadgnutls-9e8cf6ef4523a9e54475b796de6b0b9949b17751.tar.gz
certtool: allow the generation of "provable" private keys
Relates to #34
Diffstat (limited to 'src/certtool-args.def')
-rw-r--r--src/certtool-args.def13
1 files changed, 13 insertions, 0 deletions
diff --git a/src/certtool-args.def b/src/certtool-args.def
index af2c41bfab..45fe9b677e 100644
--- a/src/certtool-args.def
+++ b/src/certtool-args.def
@@ -58,6 +58,19 @@ flag = {
};
flag = {
+ name = generate-provable-privkey;
+ descrip = "Generate a private key from a seed using a provable method";
+ doc = "This will use the FIPS-186-4 algorithms for provable key generation. You may specify --seed or allow GnuTLS to generate one (recommended).";
+};
+
+flag = {
+ name = seed;
+ descrip = "When generating a private key use the given hex-encoded seed";
+ arg-type = string;
+ doc = "";
+};
+
+flag = {
name = generate-request;
value = q;
descrip = "Generate a PKCS #10 certificate request";