cms(1ssl)

cms1ssl

Openssl application commands

Part of openssl-cmds(1ssl).

Usage

openssl {cmd -help | [{-option | -option arg}] ... [arg] ...}

Overview

Every cmd listed above is a (sub-)command of the openssl(1) application. It has its own detailed manual page at openssl-cmd(1). For example, to view the manual page for the openssl dgst command, type "man openssl-dgst".

Options

Among others, every subcommand has a help option.

-help

Print out a usage message for the subcommand.

Releases

8 releases since Debian 7 (Wheezy); the text changed 7 times.

  1. 7
  2. 8
  3. 9
  4. 10
  5. 11
  6. 12
  7. 13
  8. Arch

-help since Debian 9 (Stretch).

-CAfile until Debian 11 (Bullseye); -CApath until Debian 11 (Bullseye); -EncryptedData_encrypt until Debian 11 (Bullseye); -asciicrlf until Debian 11 (Bullseye); -attime until Debian 11 (Bullseye); -auth_level until Debian 11 (Bullseye); -binary until Debian 11 (Bullseye); -certfile until Debian 11 (Bullseye); -certsout until Debian 11 (Bullseye); -check_ss_sig until Debian 11 (Bullseye); -cipher until Debian 11 (Bullseye); -cmsout until Debian 11 (Bullseye); -compress until Debian 11 (Bullseye); -content until Debian 11 (Bullseye); -crl_check until Debian 11 (Bullseye); -crl_check_all until Debian 11 (Bullseye); -crlfeol until Debian 11 (Bullseye); -data_create until Debian 11 (Bullseye); -data_out until Debian 11 (Bullseye); -debug_decrypt until Debian 11 (Bullseye); -decrypt until Debian 11 (Bullseye); -digest_create until Debian 11 (Bullseye); -digest_verify until Debian 11 (Bullseye); -econtent_type until Debian 11 (Bullseye); -encrypt until Debian 11 (Bullseye); -explicit_policy until Debian 11 (Bullseye); -extended_crl until Debian 11 (Bullseye); -from until Debian 11 (Bullseye); -ignore_critical until Debian 11 (Bullseye); -in until Debian 11 (Bullseye); -indef until Debian 11 (Bullseye); -inform until Debian 11 (Bullseye); -inhibit_any until Debian 11 (Bullseye); -inhibit_map until Debian 11 (Bullseye); -inkey until Debian 11 (Bullseye); -keyid until Debian 11 (Bullseye); -keyopt until Debian 11 (Bullseye); -md until Debian 11 (Bullseye); -no-CAfile until Debian 11 (Bullseye); -no-CApath until Debian 11 (Bullseye); -no_alt_chains until Debian 11 (Bullseye); -no_check_time until Debian 11 (Bullseye); -no_signer_cert_verify until Debian 9 (Stretch); -noattr until Debian 11 (Bullseye); -nocerts until Debian 11 (Bullseye); -nodetach until Debian 11 (Bullseye); -noindef until Debian 11 (Bullseye); -nointern until Debian 11 (Bullseye); -noout until Debian 11 (Bullseye); -nosmimecap until Debian 11 (Bullseye); -noverify until Debian 11 (Bullseye); -out until Debian 11 (Bullseye); -outform until Debian 11 (Bullseye); -partial_chain until Debian 11 (Bullseye); -passin until Debian 11 (Bullseye); -policy until Debian 11 (Bullseye); -policy_check until Debian 11 (Bullseye); -policy_print until Debian 11 (Bullseye); -print until Debian 11 (Bullseye); -purpose until Debian 11 (Bullseye); -rand until Debian 11 (Bullseye); -rctform until Debian 11 (Bullseye); -receipt_request_all until Debian 11 (Bullseye); -receipt_request_first until Debian 11 (Bullseye); -receipt_request_from until Debian 11 (Bullseye); -receipt_request_print until Debian 11 (Bullseye); -receipt_request_to until Debian 11 (Bullseye); -recip until Debian 11 (Bullseye); -resign until Debian 11 (Bullseye); -secretkey until Debian 11 (Bullseye); -secretkeyid until Debian 11 (Bullseye); -sign until Debian 11 (Bullseye); -sign_receipt until Debian 11 (Bullseye); -signer until Debian 11 (Bullseye); -stream until Debian 11 (Bullseye); -subject until Debian 11 (Bullseye); -suiteB_128 until Debian 11 (Bullseye); -suiteB_128_only until Debian 11 (Bullseye); -suiteB_192 until Debian 11 (Bullseye); -text until Debian 11 (Bullseye); -to until Debian 11 (Bullseye); -trusted_first until Debian 11 (Bullseye); -uncompress until Debian 11 (Bullseye); -use_deltas until Debian 11 (Bullseye); -verify until Debian 11 (Bullseye); -verify_depth until Debian 11 (Bullseye); -verify_email until Debian 11 (Bullseye); -verify_hostname until Debian 11 (Bullseye); -verify_ip until Debian 11 (Bullseye); -verify_name until Debian 11 (Bullseye); -verify_receipt until Debian 11 (Bullseye); -x509_strict until Debian 11 (Bullseye).

History

Initially, the manual page entry for the "openssl cmd" command used to be available at cmd(1). Later, the alias openssl-cmd(1) was introduced, which made it easier to group the openssl commands using the apropos(1) command or the shell's tab completion.

In order to reduce cluttering of the global manual page namespace, the manual page entries without the 'openssl-' prefix have been deprecated in OpenSSL 3.0 and will be removed in OpenSSL 4.0.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.