using stdout with certtool

Daniel Kahn Gillmor dkg at
Wed Mar 2 03:08:19 CET 2011

hi folks--

i know certtool has an --output option, but it's nice when tools work
properly with stdout as well.

i just tried to make a self-signed cert like this:

 certtool --bits 1024 -s > ca.pem
 certtool --load-privkey ca.pem -s > cacert.pem

the series of prompts generated by the -s command came mostly to stderr,
which is the right thing to happen.  but a few of them went to stdout,
which made the process fairly confusing.

here are the prompts that went to stdout:

> Enter the certificate's serial number in decimal (default: 1299031308): 
> The certificate will expire in (days): 220
> Path length constraint (decimal, -1 for no constraint): 1

This is with gnutls-bin 2.10.4-2 in debian.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1030 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20110301/04394e4b/attachment.pgp>

More information about the Gnutls-help mailing list