> I agree with that as well. I did not look at the actual code in openssl so I 
> did
> not know that the fractional argument with the current version does not
> error out.

I have a branch that adds pretty comprehensive option-checking to all the 
openssl commands:
        ; ./openssl x509 --CA /no/such/file
        x509: Cannot open input file /no/such/file, No such file or directory
        x509: Use -help for summary.
        ; ./openssl x509 -days 1.2
        x509: Invalid number "1.2" for -days
        x509: Use -help for summary.
        ; ./openssl rsa -out /vmlinuz
        rsa: Cannot open output file /vmlinuz, Permission denied
        rsa: Use -help for summary.

I know I broke some things; please try things out.  The branch is here:
  https://github.com/akamai/openssl/tree/rsalz-monolith

This is NOT planned for 1.0.2, but hopefully the very next one after that.


--  
Principal Security Engineer
Akamai Technologies, Cambridge, MA
IM: rs...@jabber.me; Twitter: RichSalz

Reply via email to