with the assumption it contains a complete HTTP response.
-engine id - Initialise and use the specified engine
-id_prefix arg - Generate SSL/TLS session IDs prefixed by 'arg'
-servername host - servername for HostName TLS extension
-servername_fatal - on mismatch send fatal alert (default warning alert)
-cert2 arg - certificate file to use for servername
-key2 arg - Private Key file to use for servername, in cert file if
-tlsextdebug - hex dump of all TLS extensions received
-no_ticket - disable use of RFC4507bis session tickets
-legacy_renegotiation - enable use of legacy renegotiation (dangerous)
-nextprotoneg arg - set the advertised protocols for the NPN extension (comma-separated list)
-use_srtp profiles - Offer SRTP key management with a colon-separated profile list
-keymatexport label - Export keying material using label
-keymatexportlen len - Export len bytes of keying material (default 20)
server certificate private key file second server certificate private key file second server certificate file second certificate private key file warning: id_prefix is too long, only one new session will be possible
warning: id_prefix is too long if you use SSLv2
Setting secondary ctx parameters
Using default temp DH parameters
Using default temp ECDH parameters
unable to create curve (nistp256)
PSK key given or JPAKE in use, setting server callback
error setting PSK identity hint to context
SRTP Extension negotiated, profile=%s
Peer has incorrect TLSv1 block padding
Kerberos peer principal is %s
Secure Renegotiation IS%s supported
cert_status: can't parse AIA URL
cert_status: no AIA and no default responder URL
cert_status: Can't retrieve issuer certificate.
cert_status: error querying responder
cert_status: ocsp response sent:
HTTP/1.0 200 ok
Content-type: text/html
Ciphers supported in s_server binary
---
Ciphers common between both SSL end points:
no client certificate available
'%s' contains '..' reference
HTTP/1.0 200 ok
Content-type: text/plain
'%s' is an invalid file name
Hostname in TLS extension: "%s"
Error: client did not send PSK identity
PSK error: client identity not found (got '%s' expected '%s')
Could not convert PSK key '%s' to BIGNUM
psk buffer of callback is too small (%d) for key (%d)
Allocation error in generating RSA key
Generating temp (%d bit) RSA key... %4ld session cache hits
%4ld session cache misses
%4ld session cache timeouts
%4ld callback cache hits
server.pem server2.pem -port -accept verify depth is %d
-Verify -context -certform -dhparam -named_curve -dcertform -dcert -dkeyform -dpass -dkey -nocert -no_cache -verify_return_error -serverpref -legacy_renegotiation -cipher -krb5svc -keytab -nbio -nbio_test -tlsextdebug -status_verbose -status_timeout -status_url Error parsing URL
-msg -hack -state -crlf -bugs -no_tmp_rsa -no_dhe -no_ecdhe -psk_hint -psk Not a hex number '%s'
-www -WWW -HTTP -no_ssl2 -no_ssl3 -no_tls1 -no_tls1_1 -no_tls1_2 -no_comp -no_ticket -ssl2 -ssl3 -tls1 -tls1_1 -tls1_2 -dtls1 -timeout -mtu -chain -id_prefix -servername -servername_fatal -cert2 -key2 -nextprotoneg -use_srtp -keymatexport -keymatexportlen usage: s_server [args ...]
server certificate file error setting 'id_prefix'
id_prefix '%s' set.
Setting temp DH parameters
error setting cipher list
ACCEPT
Setting temp ECDH parameters
DELAY
ERROR
verify error:%s
Client certificate
subject=%s
issuer=%s
Shared ciphers:%s
(NONE) CIPHER is %s
NEXTPROTO is Reused session-id
NOT Keying material exporter:
Label: '%s'
Length: %i bytes
s_server.c Error
Keying material: CONNECTION CLOSED
turning on non blocking io
TIMEOUT occured
lf_num == 0 DONE
shutdown accept socket
HEARTBEATING
SSL_do_handshake -> %d
Write BLOCK
Read BLOCK
shutting down SSL
cert_status: callback called
cert_status: AIA URL: %s
read R BLOCK
GET GET /stats
%-11s:%-25s ---
New, ---
Reused, %s, Cipher is %s
GET / '%s' is an invalid path
'%s' is a directory
Error opening '%s'
FILE:%s
.html .php .htm rwrite W BLOCK
Switching server context.
psk_server_cb
identity_len=%d identity=%s
PSK client identity found
fetched PSK len=%d
Error in PSK server callback
Lets print some clear text
Client_identity l"Psv_body ---
Certificate chain
%2d s:%s
i:%s
Server certificate
Server public key is %d bit
Compression: %s
Expansion: %s
Next protocol: (%d) s_client.c localhost -host -connect -sess_out -sess_in -prexit -ign_eof -no_ign_eof -pause -showcerts -psk_identity -fallback_scsv -reconnect -legacy_server_connect -no_legacy_server_connect -starttls smtp pop3 imap ftp xmpp -ssl_client_engine usage: s_client args
client certificate file Can't open session file %s
connect:errno=%d
CONNECTED(%08X)
getsockname:errno=%d
EHLO openssl.client.net
STARTTLS STLS
. CAPABILITY
. STARTTLS
AUTH TLS
/stream:features> Error writing session file %s
drop connection and then reconnect
======================================
======================================
Protocols advertised by server: NULL received PSK identity hint, continuing anyway
Received PSK identity hint '%s'
>lHfgs_client_main %d %s's in %.2fs
+R:%d:%s:%f
+DT:%s:%d:%d
+DTP:%d:%s:%s:%d
speed.c -elapsed -evp no EVP given
no engine given
-multi no multi count given
bad multi count
-mr sha256 sha512 whirlpool ripemd ripemd160 aes-128-ige aes-192-ige aes-256-ige openssl dsa512 dsa1024 dsa2048 rsa512 rsa1024 rsa2048 rsa4096 blowfish cast5 aes ghash camellia ecdsap256 ecdsap384 ecdsap521 ecdsa ecdhp256 ecdhp384 ecdhp521 ecdh Error: bad option or value
Available values:
md2 md4 md5 hmac sha1 sha256 sha512 idea-cbc seed-cbc rc2-cbc des-cbc des-ede3 dsa512 dsa1024 dsa2048
ecdsa
ecdhp256 ecdhp384 ecdhp521
ecdh
idea seed rc2 des aes camellia rsa Available options:
-evp e use EVP e.
pipe failure
Forked child %d
dup failed
Got: %s from %d
+F: +F2: +F3: +F4: +F5: +H: This is a key... 0123456789ab private RSA sign failure
+R1:%ld:%d:%.2f
public RSA verify failure
+R2:%ld:%d:%.2f
+R3:%ld:%d:%.2f
+R4:%ld:%d:%.2f
ECDSA failure.
ECDSA sign failure
+R5:%ld:%d:%.2f
ECDSA verify failure
+R6:%ld:%d:%.2f
ECDH failure.
ECDH key generation failure.
%ld %d-bit ECDH ops in %.2fs
+R7:%ld:%d:%.2f
options: %s
%s
+H type :%d %7d bytes +F:%d:%s %-13s %11.2fk :%.2f %11.2f +F2:%u:%u:%f:%f
+F3:%u:%u:%f:%f
+F4:%u:%u:%f:%f
%30sop op/s
+F5:%u:%u:%f:%f
mdc2 hmac(md5) des cbc des ede3 idea cbc seed cbc rc2 cbc rc5-32/12 cbc blowfish cbc cast cbc aes-128 cbc aes-192 cbc aes-256 cbc camellia-128 cbc camellia-192 cbc camellia-256 cbc aes-128 ige aes-192 ige aes-256 ige secp160r1 nistp192 nistp224 nistp256 nistp384 nistp521 nistk163 nistk233 nistk283 nistk409 nistk571 nistb163 nistb233 nistb283 nistb409 nistb571 Doing %s for %ds on %d size blocks: Doing %d bit %s %s's for %ds: %s is an unknown cipher or digest
aes-128-cbc aes-192-cbc aes-256-cbc aes-128-ige aes-192-ige aes-256-ige camellia-128-cbc camellia-192-cbc camellia-256-cbc rsa512 rsa1024 rsa2048 rsa4096
ecdsap256 ecdsap384 ecdsap521
-elapsed measure time in real time instead of CPU user time.
-decrypt time decryption instead of encryption (only EVP).
-mr produce machine readable output.
-multi n run n benchmarks in parallel.
Don't understand line '%s' from child %d
Unknown type '%s' from child %d
You have chosen to measure elapsed time instead of user CPU time.
internal error loading RSA key number %d
RSA sign failure. No RSA sign will be done.
%ld %d bit private RSA's in %.2fs
RSA verify failure. No RSA verify will be done.
%ld %d bit public RSA's in %.2fs
DSA sign failure. No DSA sign will be done.
%ld %d bit DSA signs in %.2fs
DSA verify failure. No DSA verify will be done.
%ld %d bit DSA verify in %.2fs
ECDSA sign failure. No ECDSA sign will be done.
%ld %d bit ECDSA signs in %.2fs
ECDSA verify failure. No ECDSA verify will be done.
%ld %d bit ECDSA verify in %.2fs
ECDH computations don't match.
The 'numbers' are in 1000s of bytes per second processed.
%18ssign verify sign/s verify/s
rsa %4u bits %8.6fs %8.6fs %8.1f %8.1f
dsa %4u bits %8.6fs %8.6fs %8.1f %8.1f
%30ssign verify sign/s verify/s
%4u bit ecdsa (%s) %8.4fs %8.4fs %8.1f %8.1f
%4u bit ecdh (%s) %8.4fs %8.1f
@ string to make the random number generator think it has entropy ; ; > ` - 4Vx4VxVx4x4V4Vx4VxVx4 4Vx4VxVx4x4V4Vx4VxVx4 4Vx4Vx ? @ @@localhost:4433 -reuse -www option too long
-time usage: s_time
SSL_CIPHER No CIPHER specified
GET %s HTTP/1.0
Unable to get connection
starting
-connect host:port - host:port to connect to (default is %s)
-nbio - Run with non-blocking IO
-ssl2 - Just use SSLv2
-ssl3 - Just use SSLv3
-bugs - Turn on SSL bug compatibility
-new - Just time new connections
-reuse - Just time connection reuse
-www page - Retrieve 'page' from the site
Collecting connection statistics for %d seconds
%d connections in %.2fs; %.2f connections/user sec, bytes read %ld
%d connections in %ld real seconds, %ld bytes read per connection
Now timing with session id reuse.
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvapps.c %s Policies:
False True Require explicit Policy: %s
Authority User PKCS12 P12 p12 Invalid Policy "%s"
unrecognized purpose
-verify_depth invalid depth
-attime %li Error parsing timestamp %s
-ignore_critical -issuer_checks -crl_check -crl_check_all -policy_check -explicit_policy -inhibit_any -inhibit_map -x509_strict -extended_crl -use_deltas -policy_print -check_ss_sig -trusted_first file name too long
%s.attr %s.attr.%s %s.%s unable to rename %s to %s
unable to open '%s'
unique_subject = %s
Out of memory
Error configuring OpenSSL
auto enabling auto ENGINE support
dynamic SO_PATH LOAD invalid engine "%s"
SET_USER_INTERFACE can't use that engine
engine "%s" set.
copy copyall Error opening %s %s
unable to load %s
Error reading %s %s no keyfile specified
no engine specified
oid_section pass: env: file: Can't open file %s
fd: Can't open BIO for stdin
pass phrase User interface error
aborted!
issuer= unable to load certificate
cannot load %s from engine
esc_2253 esc_ctrl esc_msb use_quote ignore_type show_type dump_all dump_nostr dump_der compat sep_comma_plus sep_comma_plus_space sep_semi_plus_space sep_multiline dn_rev nofname sname lname align space_eq dump_unknown RFC2253 oneline ca_default compatible no_header no_version no_serial no_signame no_validity no_subject no_issuer no_pubkey no_extensions no_sigdump no_aux no_attributes ext_default ext_error ext_parse ext_dump Subject does not start with '/'.
escape character at end of string
end of string encountered while processing type of subject name element #%d
Subject Attribute %s has no known NID, skipped
No value provided for Subject Attribute %s, skipped
error creating serial number index:(%ld,%ld,%ld)
error creating name index:(%ld,%ld,%ld)
error on line %ld of db attribute file '%s'
error converting serial to ASN.1 format
unable to load number from %s
error converting number from bin to BIGNUM
bad input format specified for %s
bad input format specified for key file
problem loading oid section %s
problem creating object %s=%s
Can't read environment variable %s
Can't access file descriptor %s
Invalid password argument "%s"
Error reading password from BIO
OpenSSL application user interface Error loading PKCS12 file for %s
Passpharse callback error for %s
Mac verify error (wrong password?) in PKCS12 file for %s
Error reading header on certificate
<<< >>> TLS 1.1 SSL 2.0 TLS 1.2 DTLS 1.0 DTLS 1.0 (bad) , CLIENT-HELLO , ERROR: NO-CIPHER-ERROR NO-CERTIFICATE-ERROR BAD-CERTIFICATE-ERROR , CLIENT-MASTER-KEY , CLIENT-FINISHED , SERVER-HELLO , SERVER-VERIFY , SERVER-FINISHED , REQUEST-CERTIFICATE , CLIENT-CERTIFICATE Alert Handshake , ??? , warning , fatal unexpected_message bad_record_mac decryption_failed record_overflow decompression_failure handshake_failure bad_certificate unsupported_certificate certificate_revoked certificate_expired certificate_unknown illegal_parameter unknown_ca access_denied decode_error decrypt_error export_restriction protocol_version insufficient_security internal_error user_canceled no_renegotiation unsupported_extension certificate_unobtainable unrecognized_name bad_certificate_hash_value unknown_psk_identity , ClientHello , ServerHello , HelloVerifyRequest , Certificate , ServerKeyExchange , CertificateRequest , ServerHelloDone , CertificateVerify , ClientKeyExchange , Finished , HeartbeatRequest , HeartbeatResponse %s %s%s [length %04lx]%s%s
%02x SSL 3.0 ChangeCipherSpec close_notify , HelloRequest , Heartbeat s_cb.c max fragment length server name client certificate URL trusted CA keys truncated HMAC status request user mapping client authz server authz cert type elliptic curves EC point formats SRP signature algorithms use SRTP heartbeat session ticket renegotiation info next protocol Server Temp Key: RSA, %d bits
DH, %d bits
ECDH, %s, %d bits
SSL_connect undefined SSL_accept write read SSL3 alert %s:%s:%s
%s:failed in %s
%s:error in %s
error setting certificate
error setting private key
depth=%d
verify error:num=%d:%s
verify return:%d
UNSUPPORTED-CERTIFICATE-TYPE-ERROR bad_certificate_status_response error setting random cookie secret
TLS %s extension "%s" (id=%d), len=%d
read from %p [%p] (%lu bytes => %ld (0x%lX))
write to %p [%p] (%lu bytes => %ld (0x%lX))
Private key does not match the certificate public key
unable to get certificate from '%s'
unable to get private key from '%s'
taN;(NNNNNNN֫ʫNNNv֫`````````ʫ`````````6```````*````````` `ެҬƬ```````````````````````````````````````````~`````````rfZNB]]ط]]]]]](]](]]]]]]]]]]]]]]]]]]]]]]]]]]]]gno ending bracket for IPv6 address
no port defined
errno=%d getnameinfo failed
s_socket.c getaddrinfo: %s
getaddrinfo bind socket listen keepalive unable to write 'random state'
unable to load 'random state'
This means that the random number generator has not been seeded
Consider setting the RANDFILE environment variable to point at a file that
'random' data can be kept in (the file will be overwritten).
with much random data.
-b -f -o usage:version -[avbofpd]
%s (Library: %s)
options: engines: OpenSSL 1.0.1e-fips 11 Feb 2013 unable to load SSL_SESSION
Context too long
No certificate present
unable to write SSL_SESSION
unable to write X509
usage: sess_id args
-text - print ssl session id details
-cert - output certificate
-context arg - set the session ID context
-V -h -? Error in cipher list
0x%02X,0x%02X,0x%02X - 0x%02X,0x%02X - usage: ciphers args
-ssl2 - SSL2 mode
-ssl3 - SSL3 mode
-tls1 - TLS1 mode
0x%02X,0x%02X,0x%02X,0x%02X - -v - verbose mode, a textual listing of the SSL/TLS ciphers in OpenSSL
-V - even more verbose
-toseq Can't open input file %s
Error reading certs file %s
Usage nseq [options]
-in file input file
-out file output file
Error reading sequence file %s
Netscape certificate sequence utility
-toseq output NS Sequence file
%02X %s:
%s:
%s, Iteration %ld
Key bag
Bag Attributes Key Attributes Shrouded Keybag: Certificate bag
Safe Contents bag
PKCS7 Data
PKCS7 Encrypted data: Unknown PBE algorithm %s
-nokeys -keyex -keysig -nocerts -clcerts -cacerts -info -twopass -nomacver -descert -export -noiter -maciter -nomaciter -nomac -macalg -certpbe -keypbe -LMK -CSP -caname -password Usage: pkcs12 [options]
-in infile input filename
Error opening input file %s
Enter MAC Password: Can't read Password
Nothing to do!
certificates from certfile Memory allocation error
Error %s getting chain.
Enter Export Password: Unknown digest algorithm %s
Enter Import Password: MAC Iteration %ld
MAC verified OK
Warning unsupported bag type: -export output PKCS12 file
-chain add certificate chain
-inkey file private key if not infile
-certfile f add all certs in f
-CApath arg - PEM format directory of CA's
-CAfile arg - PEM format file of CA's
-name "name" use name as friendly name
-caname "nm" use nm as CA friendly name (can be used more than once).
-out outfile output filename
-noout don't output anything, just verify.
-nomacver don't verify MAC.
-nocerts don't output certificates.
-clcerts only output client certificates.
-cacerts only output CA certificates.
-nokeys don't output private keys.
-info give info about PKCS#12 structure.
-des encrypt private keys with DES
-des3 encrypt private keys with triple DES (default)
-idea encrypt private keys with idea
-seed encrypt private keys with seed
encrypt PEM output with cbc aes
-camellia128, -camellia192, -camellia256
encrypt PEM output with cbc camellia
-nodes don't encrypt private keys
-noiter don't use encryption iteration
-nomaciter don't use MAC iteration
-maciter use MAC iteration
-nomac don't generate MAC
-twopass separate MAC, encryption passwords
-descert encrypt PKCS#12 certificates with triple DES (default RC2-40)
-certpbe alg specify certificate PBE algorithm (default RC2-40)
-keypbe alg specify private key PBE algorithm (default 3DES)
-macalg alg digest algorithm used in MAC (default SHA1)
-keyex set MS key exchange type
-keysig set MS key signature type
-password p set import/export password source
-passin p input file pass phrase source
-passout p output file pass phrase source
-engine e use engine e, possibly a hardware device.
load the file (or the files in the directory) into
the random number generator
-CSP name Microsoft CSP name
-LMK Add local machine keyset attribute to private key
No certificate matches private key
Mac verify error: invalid password?
Error outputting keys and certificates
-v2 -v1 -topk8 -nocrypt -nooct -nsdb -embed Usage pkcs8 [options]
Error converting key
Enter Encryption Password: Error encrypting key
Error reading key
Enter Password: Error decrypting key
Unknown broken type
-inform X input format (DER or PEM)
-passin arg input file pass phrase source
-outform X output format (DER or PEM)
-passout arg output file pass phrase source
-topk8 output PKCS8 file
-nooct use (nonstandard) no octet format
-embed use (nonstandard) embedded DSA parameters format
-nsdb use (nonstandard) DSA Netscape DB format
-noiter use 1 as iteration count
-nocrypt use or expect unencrypted private key
-v2 alg use PKCS#5 v2.0 and cipher "alg"
-v1 obj use PKCS#5 v1.5 and cipher "alg"
Warning: broken key encoding: No Octet String in PrivateKey
DSA parameters included in PrivateKey
DSA public key include in PrivateKey
DSA private key value is negative
-text_pub Usage pkey [options]
Usage pkeyparam [options]
Error reading parameters
-text print parameters as text
-noout don't output encoded parameters
Usage: pkeyutl [options]
-sigfile -peerkey Peer Key Error reading peer key %s
-peerform -verifyrecover -derive Error Opening Input File
Error Creating Output File
Can't open signature file %s
Error reading signature data
pkeyutl.c Public Key operation error
-sigfile file signature file (verify operation only)
-pubin input is a public key
-certin input is a certificate carrying a public key
-pkeyopt X:Y public key options
-verifyrecover verify with public key, recover original data
-derive derive shared secret
-passin arg pass phrase source
-peerkey command before -inkey
-pkeyopt command before -inkey
Signature file specified for non verify
No signature file specified for verify
Signature Verification Failure
Signature Verified Successfully
-challenge -spksect %s [options]
Error opening output file
SPKAC=%s
Error opening input file
Error parsing config file
Can't find SPKAC called "%s"
Error loading SPKAC
Signature OK
Signature Failure
-key arg create SPKAC using private key
-passin arg input file pass phrase source
-challenge arg challenge string
-spkac arg alternative SPKAC name
-noout don't print SPKAC
-verify verify SPKAC signature
-engine e use engine e, possibly a hardware device.
-resign -pk7out -rc2-40 -rc2-128 -rc2-64 -nointern -nochain -noattr -nodetach -nosmimecap -nosigs -stream -indef -noindef -nooldmime -crlfeol -to -from -signer -recip Unknown digest %s
-content -sign sign message
-in file input file
-out file output file
-to addr to address
-from ad from address
-subject s subject
recipient certificate file signing key file Error reading S/MIME message
Can't read content file %s
signer certificate Verification successful
Verification failure
To: %s
From: %s
Subject: %s
Error writing signers to %s
Illegal -inkey without -signer
Multiple signers or keys not allowed
No signer certificate specified
No recipient certificate or key specified
No recipient(s) certificate(s) specified
Usage smime [options] cert.pem ...
-encrypt encrypt message
-decrypt decrypt encrypted message
-verify verify signed message
-pk7out output PKCS#7 structure
-des3 encrypt with triple DES
-des encrypt with DES
-seed encrypt with SEED
-rc2-40 encrypt with RC2-40 (default)
-rc2-64 encrypt with RC2-64
-rc2-128 encrypt with RC2-128
encrypt PEM output with cbc aes
encrypt PEM output with cbc camellia
-nointern don't search certificates in message for signer
-nosigs don't verify message signature
-noverify don't verify signers certificate
-nocerts don't include signers certificate when signing
-nodetach use opaque signing
-noattr don't include any signed attributes
-binary don't translate message to text
-certfile file other certificates file
-signer file signer certificate file
-recip file recipient certificate file for decryption
-inform arg input format SMIME (default), PEM or DER
-inkey file input private key (if not signer or recipient)
-keyform arg input private key format (PEM or ENGINE)
-outform arg output format SMIME (default), PEM or DER
-content file supply or override content for detached signature
-text include or delete text MIME headers
-CApath dir trusted certificates directory
-CAfile file trusted certificates file
-trusted_first use trusted certificates first when building the trust chain
-crl_check check revocation status of signer's certificate using CRLs
-crl_check_all check revocation status of signer's certificate chain using CRLs
-engine e use engine e, possibly a hardware device.
-passin arg input file pass phrase source
load the file (or the files in the directory) into
cert.pem recipient certificate(s) for encryption
Bad input format for PKCS#7 file
Error creating PKCS#7 structure
Error decrypting PKCS#7 structure
Bad output format for PKCS#7 file
-sign_receipt -verify_retcode -verify_receipt -cmsout -data_out -data_create -digest_verify -digest_create -compress -uncompress -EncryptedData_decrypt -EncryptedData_encrypt -debug_decrypt -no_signer_cert_verify -keyid -no_content_verify -no_attr_verify -receipt_request_print -receipt_request_all -receipt_request_first -receipt_request_from -receipt_request_to -secretkey Invalid key %s
-secretkeyid Invalid id %s
-pwri_password -econtent_type Invalid OID %s
-certsout -rctform No secret key id
Error writing certs to %s
Can't open receipt file %s
Bad input format for receipt
Error reading receipt
Error creating CMS structure
Signer %d:
No Receipt Request
Signed Content ID:
Receipts From List:
: First Tier
: All
Unknown (%d)
Receipts To:
No Signed Receipts Recipients
Signed receipts only allowed with -sign
Usage cms [options] cert.pem ...
-cmsout output CMS structure
-certsout file certificate output file
-keyid use subject key identifier
receipt signer certificate file Bad input format for CMS file
Signed Receipt Request Creation Error
Error decrypting CMS using secret key
Error decrypting CMS using private key
Error decrypting CMS using password
Error decrypting CMS structure
Receipt Request Parse Error
Bad output format for CMS file
Usage: rand [options] num
-out file - write to file
-engine e - use engine e, possibly a hardware device.
-rand file%cfile%c... - seed PRNG from files
-base64 - base64 encode output
-hex - hex encode output
[Error]: internal stack error
[Error]: command name too long
usage: engine opts [engine ...]
-v[v[v[v]]] - verbose mode, for each engine, list its 'control commands'
-vv will additionally display each command's description
-vvv will also add the input flags for each command
-vvvv will also show internal input flags
-c - for each engine, also list the capabilities
-t[t] - for each engine, check that they are really available
-tt will display error trace for unavailable engines
-pre - runs command 'cmd' against the ENGINE before any attempts
to load it (if -t is used)
-post - runs command 'cmd' against the ENGINE after loading it
(only used if -t is also provided)
NB: -pre and -post will be applied to all ENGINEs supplied on the command
line, or all supported ENGINEs if none are specified.
Eg. '-pre "SO_PATH:/lib/libdriver.so"' calls command "SO_PATH" with
argument "/lib/libdriver.so".
[Failure]: %s
[Success]: %s
engine.c -t -pre -post Loaded: (%s) %s
RSA DSA DH RAND [%s]
[ available ]
[ unavailable ]
%s: %s
%s%s(input flags):
[Internal] NUMERIC | STRING NO_INPUT <0x%04X> Error creating connect BIO
Error creating SSL context.
Error connecting BIO
Can't get connection fd
Timeout on connect
Unexpected retry condition
Timeout on request
Select error
Error accepting connection
POST Invalid request
Error parsing OCSP request
Illegal timeout value %s
-url -header -ignore_err -nonce -no_nonce -resp_no_certs -resp_key_id -no_certs -no_signature_verify -no_cert_verify -no_chain -no_cert_checks -no_explicit -trust_other -no_intern -req_text -resp_text -reqin -respin -VAfile -sign_other -verify_other -validity_period Illegal validity period %s
-status_age Illegal validity age %s
-reqout -respout -path issuer certificate Error Creating OCSP request
-index -nmin Illegal update period %s
-nrequest Illegal accept count %s
-ndays -rsigner -rkey -rother OCSP utility
Usage ocsp [options]
-CA file CA certificate
Error reading OCSP request
Error setting up accept BIO
responder certificate responder other certificates responder private key signer certificates signer private key Error signing OCSP request
Error opening file %s
bn ocsp.c Error reading OCSP response
Responder Error: %s (%d)
validator certificate Error parsing response
Nonce Verify error
Response Verify Failure
Response verify OK
ERROR: No Status found.
This Update: Next Update: Reason: %s
Revocation Time: Error querying OCSP responsder
No issuer certificate specified
Error converting serial number %s
-out file output filename
-issuer file issuer certificate
-cert file certificate to check
-serial n serial number to check
-signer file certificate to sign OCSP request with
-signkey file private key to sign OCSP request with
-sign_other file additional certificates to include in signed request
-no_certs don't include any certificates in signed request
-req_text print text form of request
-resp_text print text form of response
-text print text form of request and response
-reqout file write DER encoded OCSP request to "file"
-respout file write DER encoded OCSP reponse to "file"
-reqin file read DER encoded OCSP request from "file"
-respin file read DER encoded OCSP reponse from "file"
-nonce add OCSP nonce to request
-no_nonce don't add OCSP nonce to request
-url URL OCSP responder URL
-host host:n send OCSP request to host on port n
-path path to use in OCSP request
-CApath dir trusted certificates directory
-CAfile file trusted certificates file
-trusted_first use trusted certificates first when building the trust chain
-VAfile file validator certificates file
-validity_period n maximum validity discrepancy in seconds
-status_age n maximum status age in seconds
-noverify don't verify response at all
-verify_other file additional certificates to search for signer
-trust_other don't verify additional certificates
-no_intern don't search certificates contained in response for signer
-no_signature_verify don't check signature on response
-no_cert_verify don't check signing certificate
-no_chain don't chain verify response
-no_cert_checks don't do additional checks on signing certificate
-port num port to run responder on
-index file certificate status index file
-rsigner file responder certificate to sign responses with
-rkey file responder key to sign responses with
-rother file other certificates to include in response
-resp_no_certs don't include any certificates in response
-nmin n number of minutes before next update
-ndays n number of days before next update
-resp_key_id identify reponse by signing certificate key ID
-nrequest n number of requests to accept (default unlimited)
- use specified digest in the request
Error Opening OCSP request file
Error loading responder certificate
Waiting for OCSP client connections...
Need an OCSP request for this operation!
Error loading signer certificate
Need a responder certificate, key and CA for this operation!
Error Opening OCSP response file
WARNING: no nonce in response
WARNING: Status times invalid.
-generate -bits -safe -checks Unknown option '%s'
No prime specified
Specifiy the number of bits.
not is %sprime
%-14s hex
-checks %-14s number of checks
ts.c cannot convert %s to OID
could not create nonce
could not create query
-section -query -data -digest -token_in -token_out -reply -queryfile Error getting password.
Response is not generated.
Response has been generated.
invalid digest string
memory allocation failure
Verification: FAILED
bad digest, %d bytes must be specified
Warning: could not open file %s for reading, using serial number: 1
Error during serial number generation. could not save serial number to %s
usage:
ts -query [-rand file%cfile%c...] [-config configfile] [-data file_to_hash] [-digest digest_bytes][-] [-policy object_id] [-no_nonce] [-cert] [-in request.tsq] [-out request.tsq] [-text]
or
ts -reply [-config configfile] [-section tsa_section] [-queryfile request.tsq] [-passin password] [-signer tsa_cert.pem] [-inkey private_key.pem] [-chain certs_file.pem] [-policy object_id] [-in response.tsr] [-token_in] [-out response.tsr] [-token_out] [-text] [-engine id]
or
ts -verify [-data file_to_hash] [-digest digest_bytes] [-queryfile request.tsq] -in response.tsr [-token_in] -CApath ca_path -CAfile ca_file.pem -trusted_first-untrusted cert_file.pem
;
0
H ` h 8 (( X # X% X2 2@ 3 (4 4 h5
58
:h
hE
E
m@ Xnp q hh ( 0
(
8
H H ` H @ (p M8 T \ (j( vx X ؚh X ȧ0 h H p x ( 8 8 h H 8 H; @X hK O x[ 8\0 ^X ` ` (h p ؝ h (0 آP 8p H h 8 إ 8 X H( X@ hX p 8 x hP h ( 8 H 8 P $ 8( h( X+ ,H 8/x / / 0 h2 3 4P 7x 7 88 9 X;! H<0! =! 8>! x?" ?(" ?@" B" HB" xB" C# hF@# XG# HJ# HK# M $ M8$ (NP$ HNp$ N$ XO$ xO % (P % Qp% HR% T% xV% Y& `X& b& d& f& g& 8i(' jX' j' k' m' n ( xpp( s( Hu() Xu@) uh) v) (x) h}8* * Ȉ* X(+ `+ + + , ((, ȓX, H, , - h- H- . 8X. xx. . . 80/ H/ / / 0 h0 (K0 xK0 Q(1 Q@1 S1 T1 a2 8fX2 Xg2 h2 (3 3 ȧ3 3 (4 @4 Hh4 4 ز4 5 (5 zR x 4 L d ] D_
M N , MMQ[
J 4 @ BBB B(A0D8G ] D_
M N ( F E
E , , x M[P
K L \ H! BBB B(A0A8Dv
8C0A(B BBBH $ ( M]@
I L BBB B(I0H8G
8A0A(B BBBB $ 0)W DQ
K b
F T D p) BEE D(G0G@k
0A(A BBBG g0C(A BBB $ ) MMIpp $ `* MMIpp $ * MMIpp $ P+x ML z
M W , < + MMNpk
E L l 0
BBB B(A0D8G
f
8A0A(B BBBD 4 :Y AAO o
AAF LCA L :' BBB E(D0A8G-
8C0A(B BBBH , D b ADD0G
FAI , t b[ MMN`
K L f8 BBB J(A0H8GK
8A0A(B BBBK $ ~ MN0A
D ZL ~ BBB J(I0A8D
8C0A(B BBBK L l BBB B(A0I8N
8D0A(B BBBI $ hx AG |
AK L BED A(G0
(F ABBK m(C ABB L 4 p} BBJ J(A0A8G
8A0A(B BBBF $ N j
H
I L (V BEB B(D0D8JB
8A0A(B BBBA L 8 BGB B(A0I8GA
8A0A(B BBBF L L Z BBB B(I0A8K`
8C0A(B BBBH $ x AG |
AK L BBB B(A0I8N
8A0A(B BBBK L BBB B(A0D8Jp
8D0A(B BBBK 4 d BDA GP
AABF , (N AGD@
CAG $ H0 LV0
G L Ps BBB B(A0A8G
8A0A(B BBBA , D T MMQd
A $ t S N b
H V L BBE E(D0D8Dd
8A0A(B BBBH L M BBB B(A0H8O
8D0A(B BBBE L <
h<4 BBB J(I0A8D
8C0A(B BBBA L
XC BBB J(I0A8D
8C0A(B BBBD L
JJ
BBB E(D0A8GC
8A0A(B BBBD L , W BBB J(I0A8G
8C0A(B BBBD L | 8d BBB E(D0A8G
8D0A(B BBBH L p\
BBB J(I0A8G
8D0A(B BBBI L z
BBB B(A0I8N
8D0A(B BBBD $ l hx AG |
AK L ( BBB J(I0A8G
8C0A(B BBBJ L ; BDB B(D0K8G@
8F0A(B BBBD L 4
> BBB J(A0H8GG
8A0A(B BBBG L
1 BBB J(I0A8G
8A0A(B BBBI $
LQ0
K L
h
BEE B(A0A8L
8C0A(B BBBG $ L x AG |
AK L t BBJ J(A0A8D
8D0A(B BBBD $ M[PG
A L 8s BBB B(A0D8G
8C0A(B BBBH , < h ADD0G
FAI l , BED NB O U y L , BBB B(A0A8G!
8C0A(B BBBB 4 $ $ BAA J@K
AABC L \ (L BGB J(K0A8G
8D0A(B BBBG , 3 M^q
D , 8v HcN`
E $ hC U
H $ 4 Dj MN@
D $ \ HFd LI ^
E L G BBE D(D0P
(A BBDF A(A HBE L G{ BBB B(D0D8J@
8A0A(B BBBH L $ O4 BPB B(A0A8G
8A0A(B BBBE $ t p U0
D $ 8 TD G
A , MMMDPQ
D $ k YI@
H ؇' K[ 4 ON0 T S AH t $ AQ
F
H $ h AQ
F
H $ AQ
F
H G@
A < hT AI L \ ` BBB J(A0A8Nd
8A0A(B BBBD , M[
F L BBB B(A0I8N@G
8A0A(B BBBG , D
\ C t @> N o `> N o > Gv$ q LI@x
C $ MI k
G 4 BFN L
ABK AAL , T MN0
E [
M t ML Z L @ BEE B(D0F8G
8A0A(B BBBC 6
$ < , T MMNp
J L 0z BBE B(D0A8Dp
8D0A(B BBBB ` " DW
E A , p MMQ
p
E $ $ 0 MY
F , L
1 MMQ
E | Aq
F s H @ , HO MMLT
F $ h MI0z
H , $ MML
G $ T MML
B | S q MD D
K $ x MV0
B $ T MN0
F $ H MI0[
O _ \ 4 2 BEB B(A0A8GPR
8F0A(B BBBK 8A0A(B BBB, HP P
H W
I W L p 9 BEB B(A0A8GP
8A0A(B BBBB ` , X L D P y BEB B(A0D8GP
8C0A(B BBBJ , D0g , D0g L BEE E(A0D8D`
8D0A(B BBBC , p MMNPi
G \ D # BIA F(J0m
(A ABBA ]
(C ABBK I
(F ABBA $ # MQ
G , x& MMN@
G $ H': L[PX
A $ `)% D` < x)f KZ T ) AT 4 t )| ADJ R
GAG DFA 4 * ADJ R
GAG OFA p* AT p* ML L $ + BEE E(A0A8G@p
8A0A(B BBBD t ,N MN n , , MMQ
C $ P.[ LMIP
E , 04 MMNpt
D < 3 BKK D(D@
(F ABBQ $ \ X: LYh
C , < MML
E $ > MI
G ?* U0r
I , @D QI ^
H T
L p
H , , B MMNPM
K D \ B ADG m
FAH \
CAH d
CAH $ C MI [
G , C, LKS@
G $ E MI Q
I L $! F BHE B(D0H8G
8A0A(B BBBD L t! H# BBE J(A0C8G
8C0A(B BBBB d ! J BDE B(A0H8J
8A0A(B BBBH W8F0A(B BBB ," L $ D" L AJq
AC < l" L BED A(D0
(D ABBE $ " Me MLp
G d " PN; BBB B(A0I8KP
8A0A(B BBBE
8C0A(B BBBG L <# (S BBB J(I0A8Dp
8C0A(B BBBE L # xY BBB E(D0A8G
8A0A(B BBBA L # ] BBB B(A0D8D@
8C0A(B BBBH 4 ,$ (aL BED C(D0s(A ABB L d$ @a BEE A(D0p
(A BBGC K(A BBG , $ bC BDD uAB $ c MI0 $ % c ]^
E , ,% c M[`
F `
H D \% hgz BEE E(D0D8FPP8A0A(B BBBL % g BBE E(D0A8F`
8D0A(B BBBG $ % iw AI g
AF }AL & hi,' BGB B(I0A8G
8A0A(B BBBJ L l& H BBB B(A0A8J
8A0A(B BBBI L & o BBB B(A0A8G
8C0A(B BBBA L ' v BBB B(A0A8GPH
8C0A(B BBBK \' ئ; A5 |' { L ' `
BBB B(A0C8J
8D0A(B BBBB L ' 0 BBB B(I0I8DZ
8C0A(B BBBD L 4( $ BKB B(A0A8G~
8C0A(B BBBD ( D LD s L ( BBB B(A0D8D@
8D0A(B BBBI , ( f BID SAB D $) BEE B(A0G8D@8A0A(B BBBL l) 8~8 BKB B(A0A8Gt
8C0A(B BBBF ) hM LD | L ) Y BGB B(I0A8G!.
8A0A(B BBBA ,* L D* BBE B(A0A8G(
8A0A(B BBBJ $ * ! MV0j
C L * "#
BBB E(D0A8G
8D0A(B BBBA L + /V BEE B(A0D8G
8D0A(B BBBD , \+ 3 ADG
AAA L + 4s BDE B(I0A8O
8A0A(B BBBG L + 5: BIB B(A0D8G6
8D0A(B BBBB d ,, hp BBB B(A0H8L`O
8A0A(B BBBJ L
8C0A(B BBBH , t D , t3 BEB D(D0M!
0A(A BBBD , u 4 - u BAD D0
DABC $ D- pv LQ
B $ l- w ML f
A , - x M^+
J L - ~ BBB B(D0D8G
8C0A(B BBBA . В $ ,. Ȓ Q_@X iF iF iF iF iF iF iF jF cF cF cF TF hF pF F zF F F F F F F &F /F 8F AF JF SF \F eF nF wF g g @g g G G G G FF G G @ (G 1G <G EG LG [G pG G G G ` ` G ` G ` G 2F @ ` G G G G G G G G G G G G G %G @ 0G :G DG RG ]G dG rG ~G G G
#
I I I ,A
*F o @ (l@ @
M g c x@ H@ 0 o @ o o ʹ@ ȫg ,A ,A ,A ,A ,A -A -A .-A >-A N-A ^-A n-A ~-A -A -A -A -A -A -A -A -A .A .A ..A >.A N.A ^.A n.A ~.A .A .A .A .A .A .A .A .A /A /A ./A >/A N/A ^/A n/A ~/A /A /A /A /A /A /A /A /A 0A 0A .0A >0A N0A ^0A n0A ~0A 0A 0A 0A 0A 0A 0A 0A 0A 1A 1A .1A >1A N1A ^1A n1A ~1A 1A 1A 1A 1A 1A 1A 1A 1A 2A 2A .2A >2A N2A ^2A n2A ~2A 2A 2A 2A 2A 2A 2A 2A 2A 3A 3A .3A >3A N3A ^3A n3A ~3A 3A 3A 3A 3A 3A 3A 3A 3A 4A 4A .4A >4A N4A ^4A n4A ~4A 4A 4A 4A 4A 4A 4A 4A 4A 5A 5A .5A >5A N5A ^5A n5A ~5A 5A 5A 5A 5A 5A 5A 5A 5A 6A 6A .6A >6A N6A ^6A n6A ~6A 6A 6A 6A 6A 6A 6A 6A 6A 7A 7A .7A >7A N7A ^7A n7A ~7A 7A 7A 7A 7A 7A 7A 7A 7A 8A 8A .8A >8A N8A ^8A n8A ~8A 8A 8A 8A 8A 8A 8A 8A 8A 9A 9A .9A >9A N9A ^9A n9A ~9A 9A 9A 9A 9A 9A 9A 9A 9A :A :A .:A >:A N:A ^:A n:A ~:A :A :A :A :A :A :A :A :A ;A ;A .;A >;A N;A ^;A n;A ~;A ;A ;A ;A ;A ;A ;A ;A ;A =A N=A ^=A n=A ~=A =A =A =A =A =A =A =A =A >A >A .>A >>A N>A ^>A n>A ~>A >A >A >A >A >A >A >A >A ?A ?A .?A >?A N?A ^?A n?A ~?A ?A ?A ?A ?A ?A ?A ?A ?A @A @A .@A >@A N@A ^@A n@A ~@A @A @A @A @A @A @A @A @A AA AA .AA >AA NAA ^AA nAA ~AA AA AA AA AA AA AA AA AA BA BA .BA >BA NBA ^BA nBA ~BA BA BA BA BA BA BA BA BA CA CA .CA >CA NCA ^CA nCA ~CA CA CA CA CA CA CA CA CA DA DA .DA >DA NDA ^DA nDA ~DA DA DA DA DA DA DA DA DA EA EA .EA >EA NEA ^EA nEA ~EA EA EA EA EA EA EA EA EA FA FA .FA >FA NFA ^FA nFA ~FA FA FA FA FA FA FA FA FA GA GA .GA >GA NGA ^GA nGA ~GA GA GA GA GA GA GA GA GA HA HA .HA >HA NHA ^HA nHA ~HA HA HA HA HA HA HA HA HA IA IA .IA >IA NIA ^IA nIA ~IA IA IA IA IA IA IA IA IA JA JA .JA >JA NJA ^JA nJA ~JA JA JA JA JA JA JA JA JA KA KA .KA >KA NKA ^KA nKA ~KA KA KA KA KA KA KA KA KA LA LA .LA >LA NLA ^LA nLA ~LA LA LA LA LA LA LA LA LA MA MA .MA >MA NMA ^MA nMA ~MA MA MA MA MA MA MA MA MA NA NA .NA >NA NNA ^NA nNA ~NA NA NA NA NA NA NA NA NA OA OA .OA >OA NOA ^OA nOA ~OA OA OA OA OA OA OA OA OA PA PA .PA >PA NPA ^PA nPA ~PA PA PA PA PA PA PA PA PA QA QA .QA >QA NQA ^QA nQA ~QA QA QA QA QA QA QA QA QA RA RA .RA >RA NRA ^RA nRA ~RA RA RA RA RA RA RA RA RA SA SA .SA >SA NSA ^SA nSA ~SA SA SA SA SA SA SA SA SA TA TA .TA >TA NTA ^TA nTA ~TA TA TA TA TA TA TA TA TA UA UA .UA >UA NUA ^UA nUA ~UA UA UA UA UA UA UA UA UA VA VA .VA >VA NVA ^VA nVA ~VA VA VA VA VA VA VA VA VA WA WA .WA >WA NWA ^WA nWA ~WA WA WA WA WA WA WA WA WA XA XA .XA >XA NXA ^XA nXA ~XA XA XA XA XA XA XA XA XA YA YA .YA >YA NYA ^YA nYA ~YA YA YA YA YA YA YA YA YA ZA ZA .ZA >ZA NZA ^ZA nZA ~ZA ZA ZA ZA ZA ZA ZA ZA ZA [A [A .[A >[A N[A ^[A n[A ~[A [A [A [A [A [A [A [A [A \A \A .\A >\A N\A ^\A n\A ~\A \A \A \A \A \A \A \A \A ]A ]A .]A >]A N]A ^]A n]A ~]A ]A ]A ]A ]A ]A ]A ]A ]A ^A ^A .^A >^A N^A ^^A n^A ~^A ^A ^A ^A ^A ^A ^A ^A ^A _A _A ._A >_A N_A ^_A n_A ~_A _A _A _A _A _A _A _A _A `A `A .`A >`A N`A ^`A n`A ~`A `A `A `A `A `A `A `A `A aA aA .aA >aA NaA ^aA naA ~aA aA aA aA aA aA aA aA aA bA bA .bA >bA NbA ^bA nbA ~bA bA bA bA bA bA bA bA bA cA cA .cA >cA NcA ^cA ncA ~cA cA cA cA cA cA cA cA cA dA dA .dA >dA NdA ^dA ndA ~dA dA dA dA dA dA dA dA dA eA eA .eA >eA NeA ^eA neA ~eA eA eA eA eA eA eA eA eA fA fA .fA >fA NfA ^fA nfA ~fA fA fA fA fA fA fA fA fA gA gA .gA >gA NgA ^gA ngA ~gA gA gA gA gA gA gA gA gA hA hA .hA >hA NhA ^hA nhA ~hA hA hA hA hA hA hA hA hA iA iA .iA >iA NiA ^iA niA ~iA iA iA iA iA iA iA iA iA jA jA .jA >jA NjA ^jA njA ~jA jA jA jA jA jA jA jA jA kA kA .kA >kA NkA ^kA nkA ~kA kA kA kA kA kA kA kA kA lA lA .lA >lA NlA ^lA nlA ~lA lA lA lA lA lA lA lA lA mA mA .mA >mA NmA ^mA nmA ~mA mA mA mA mA mA mA mA mA nA nA .nA >nA NnA ^nA nnA ~nA nA nA nA nA rFF ~A F `A F ЧA ,F A ^F A F pA LF B ,F @.B ,F 7B ,F .F B nXF B O.F B eF B jF B T.F B pF B vF B Y.F B ].F B d.F B h.F B k.F B p.F B x.F B .F B .F B .F B .F B .F B .F B .F B .F B .F B .F B .F B .F B .F B /F B /F B /F B "/F B +/F B 4/F B