Latest update.

doc/man1/openssl-spkac.pod

@@ -8,22 +8,24 @@ openssl-spkac - SPKAC printing and generating utility
 
 B<openssl> B<spkac>
 [B<-help>]
-[B<-in filename>]
-[B<-out filename>]
-[B<-key keyfile>]
-[B<-keyform PEM|DER|ENGINE>]
-[B<-passin arg>]
-[B<-challenge string>]
+[B<-in> I<filename>]
+[B<-out> I<filename>]
+[B<-key> I<keyfile>]
+[B<-keyform> B<DER>|B<PEM>|B<ENGINE>]
+[B<-passin> I<arg>]
+[B<-challenge> I<string>]
 [B<-pubkey>]
-[B<-spkac spkacname>]
-[B<-spksect section>]
+[B<-spkac> I<spkacname>]
+[B<-spksect> I<section>]
 [B<-noout>]
 [B<-verify>]
-[B<-engine id>]
+[B<-engine> I<id>]
+
+=for openssl ifdef engine
 
 =head1 DESCRIPTION
 
-The B<spkac> command processes Netscape signed public key and challenge
+This command processes Netscape signed public key and challenge
 (SPKAC) files. It can print out their contents, verify the signature and
 produce its own SPKACs from a supplied private key.
 
@@ -35,43 +37,43 @@ produce its own SPKACs from a supplied private key.
 
 Print out a usage message.
 
-=item B<-in filename>
+=item B<-in> I<filename>
 
 This specifies the input filename to read from or standard input if this
 option is not specified. Ignored if the B<-key> option is used.
 
-=item B<-out filename>
+=item B<-out> I<filename>
 
 Specifies the output filename to write to or standard output by
 default.
 
-=item B<-key keyfile>
+=item B<-key> I<keyfile>
 
-Create an SPKAC file using the private key in B<keyfile>. The
+Create an SPKAC file using the private key in I<keyfile>. The
 B<-in>, B<-noout>, B<-spksect> and B<-verify> options are ignored if
 present.
 
-=item B<-keyform PEM|DER|ENGINE>
+=item B<-keyform> B<DER>|B<PEM>|B<ENGINE>
 
 Whether the key format is PEM, DER, or an engine-backed key.
 The default is PEM.
 
-=item B<-passin password>
+=item B<-passin> I<arg>
 
-The input file password source. For more information about the format of B<arg>
-see the B<PASS PHRASE ARGUMENTS> section in L<openssl(1)>.
+The input file password source. For more information about the format of I<arg>
+see L<openssl(1)/Pass Phrase Options>.
 
-=item B<-challenge string>
+=item B<-challenge> I<string>
 
 Specifies the challenge string if an SPKAC is being created.
 
-=item B<-spkac spkacname>
+=item B<-spkac> I<spkacname>
 
 Allows an alternative name form the variable containing the
 SPKAC. The default is "SPKAC". This option affects both
 generated and input SPKAC files.
 
-=item B<-spksect section>
+=item B<-spksect> I<section>
 
 Allows an alternative name form the section containing the
 SPKAC. The default is the default section.
@@ -90,9 +92,9 @@ being created).
 
 Verifies the digital signature on the supplied SPKAC.
 
-=item B<-engine id>
+=item B<-engine> I<id>
 
-Specifying an engine (by its unique B<id> string) will cause B<spkac>
+Specifying an engine (by its unique I<id> string) will cause this command
 to attempt to obtain a functional reference to the specified engine,
 thus initialising it if needed. The engine will then be set as the default
 for all available algorithms.
@@ -124,8 +126,8 @@ Example of an SPKAC, (long lines split up for clarity):
 
 =head1 NOTES
 
-A created SPKAC with suitable DN components appended can be fed into
-the B<ca> utility.
+A created SPKAC with suitable DN components appended can be fed to
+L<openssl-ca(1)>.
 
 SPKACs are typically generated by Netscape when a form is submitted
 containing the B<KEYGEN> tag as part of the certificate enrollment