> I agree with that as well. I did not look at the actual code in openssl so I > did > not know that the fractional argument with the current version does not > error out.
I have a branch that adds pretty comprehensive option-checking to all the openssl commands: ; ./openssl x509 --CA /no/such/file x509: Cannot open input file /no/such/file, No such file or directory x509: Use -help for summary. ; ./openssl x509 -days 1.2 x509: Invalid number "1.2" for -days x509: Use -help for summary. ; ./openssl rsa -out /vmlinuz rsa: Cannot open output file /vmlinuz, Permission denied rsa: Use -help for summary. I know I broke some things; please try things out. The branch is here: https://github.com/akamai/openssl/tree/rsalz-monolith This is NOT planned for 1.0.2, but hopefully the very next one after that. -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz