On Sun, May 25, 2014 at 03:02:18PM +0200, Alexander Schrijver wrote:
> c_rehash doesn't exist in OpenBSD and remove a history lesson which is either
> not aplicable anymore or was never true.
> 

hmm, two things for the price of one.

since we don;t have c_rehash, it seems silly to reference it. but
there's another ref in ftp(1) added only a few months ago by jca...any
comments, jca?

the change to HISTORY is less convincing for me. there may well be room
to cut verbosity from this file (it's difficult to imagine adding to
it), but zapping one section so inconsistently feels wrong. when i
eventually get my extra life, i pledge to spend it checking this page.
until then, i've opted to zap the c_rehash reference only.

unless they protest, i will commit this:

Index: usr.bin/ftp/ftp.1
===================================================================
RCS file: /cvs/src/usr.bin/ftp/ftp.1,v
retrieving revision 1.91
diff -u -r1.91 ftp.1
--- usr.bin/ftp/ftp.1   23 Jan 2014 08:09:08 -0000      1.91
+++ usr.bin/ftp/ftp.1   25 May 2014 18:58:31 -0000
@@ -232,7 +232,6 @@
 .It Cm capath Ns = Ns Ar /path/to/certs/
 Directory containing PEM encoded CA certificates used for certificate
 validation.
-Such a directory can be prepared using the c_rehash OpenSSL utility.
 .It Cm ciphers Ns = Ns Ar cipher_list
 Specify the list of ciphers that will be used by
 .Nm .
Index: usr.sbin/openssl/openssl.1
===================================================================
RCS file: /cvs/src/usr.sbin/openssl/openssl.1,v
retrieving revision 1.94
diff -u -r1.94 openssl.1
--- usr.sbin/openssl/openssl.1  18 May 2014 08:23:27 -0000      1.94
+++ usr.sbin/openssl/openssl.1  25 May 2014 18:58:34 -0000
@@ -9072,11 +9072,6 @@
 option of the
 .Nm x509
 utility).
-Under
-.Ux ,
-the
-.Nm c_rehash
-script will automatically create symbolic links to a directory of certificates.
 .It Fl crl_check
 Checks end entity certificate validity by attempting to look up a valid CRL.
 If a valid CRL cannot be found an error occurs.
@@ -10420,10 +10415,6 @@
 In
 .Nm OpenSSL
 1.0.0 and later it is based on a canonical version of the DN using SHA1.
-This means that any directories using the old form
-must have their links rebuilt using
-.Ar c_rehash
-or similar.
 .\"
 .\" FILES
 .\"

Reply via email to