On Tue, 2010-12-14 at 00:00 +0100, Andy Polyakov via RT wrote: > >>> I'd argue that it's intentional. The original purpose for -out option > >>> appears to be to emit *certificate* itself, not information about it. > >>> Yes, this kind of means that I reckon that -text option should result in > >>> output to STDout, not to one appointed by -out. There also is > >>> inconsistent usage of STDout when treating -days parameter: error > >>> message should be printed on stderr, not STDout. If nobody screams for > >>> a week, http://cvs.openssl.org/chngview?cn=20156 will go down to > >>> 1.0.x. > >> > >> I'm afraid that the change of the target of the -text option output will > >> break expectations of some scripts people in the wild use. Although it > >> is slightly more logical with the change than before I'd prefer keeping > >> it as is at least for 1.0.x. Of course the -days error output change is > >> fine. > > I second this. > > How about -text -noout -out foo.txt writing info to foo.txt, and -text > -out foo.txt to stdout?
That would be still a change in the behavior that shouldn't in my opinon be committed to the stable branches, definitely not to the 1.0.0 branch. -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org