openssl-ca(1ssl) on Linux
The text c7c63f237a51, as Debian 12 (Bookworm) shipped it.
sample minimal CA application
Flags it lists
-
-batch -
-cert -
-certform -
-config -
-create_serial -
-crl_CA_compromise -
-crl_compromise -
-crl_hold -
-crl_lastupdate -
-crl_nextupdate -
-crl_reason -
-crldays -
-crlexts -
-crlhours -
-crlsec -
-dateopt -
-days -
-enddate -
-engine -
-extensions -
-extfile -
-gencrl -
-help -
-in -
-infiles -
-inform -
-key -
-keyfile -
-keyform -
-md -
-msie_hack -
-multivalue-rdn -
-name -
-noemailDN -
-notext -
-out -
-outdir -
-passin -
-policy -
-preserveDN -
-propquery -
-provider -
-provider-path -
-rand -
-rand_serial -
-revoke -
-section -
-selfsign -
-sigopt -
-spkac -
-ss_cert -
-startdate -
-status -
-subj -
-updatedb -
-utf8 -
-valid -
-verbose -
-vfyopt -
-writerand