Fix parsing of serial# in req

Reported by Jakub Wilk.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2556)
(cherry picked from commit be4c82aa767998ce2a5717fc895482052373f1b1)

diff --git a/apps/req.c b/apps/req.c
index 2707dc9e367d7fb656c68058b79a7a4680f49648..e8951aecf9711499e0c2c640cbe0e3bef7ae9fe0 100644 (file)
--- a/apps/req.c
+++ b/apps/req.c
@@ -121,7 +121,7 @@ OPTIONS req_options[] = {
     {"multivalue-rdn", OPT_MULTIVALUE_RDN, '-',
      "Enable support for multivalued RDNs"},
     {"days", OPT_DAYS, 'p', "Number of days cert is valid for"},
-    {"set_serial", OPT_SET_SERIAL, 'p', "Serial number to use"},
+    {"set_serial", OPT_SET_SERIAL, 's', "Serial number to use"},
     {"extensions", OPT_EXTENSIONS, 's',
      "Cert extension section (override value in config file)"},
     {"reqexts", OPT_REQEXTS, 's',

diff --git a/doc/apps/req.pod b/doc/apps/req.pod
index 8362f53d8c575407fd3f6301c830cebe9075af09..8ba04aedba9b3ee8d0e4c88105aa4c144b166663 100644 (file)
--- a/doc/apps/req.pod
+++ b/doc/apps/req.pod
@@ -242,7 +242,6 @@ days to certify the certificate for. The default is 30 days.
 
 serial number to use when outputting a self signed certificate. This
 may be specified as a decimal value or a hex value if preceded by B<0x>.
-It is possible to use negative serial numbers but this is not recommended.
 
 =item B<-extensions section>