[openssl] master update

[dev at ddvo.net]

The branch master has been updated
       via  ebc1e8fc4ec2888fdb99d487c064d8ef586f3ee3 (commit)
      from  4c525cb5b6bbc85de592cb7bf623676a914b8dae (commit)


- Log -----------------------------------------------------------------
commit ebc1e8fc4ec2888fdb99d487c064d8ef586f3ee3
Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
Date:   Sat Jul 25 13:47:04 2020 +0200

    openssl-cmp.pod.in: Update and extend example using Insta Demo CA
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/12534)

-----------------------------------------------------------------------

Summary of changes:
 .../insta.ca.crt                                       | Bin 1169 -> 916 bytes
 doc/man1/openssl-cmp.pod.in                            |   6 ++++++
 2 files changed, 6 insertions(+)
 copy fuzz/corpora/cmp/ab6a410b82656ea3d967dbcf91b4269ada98a4a6 => apps/insta.ca.crt (69%)

diff --git a/fuzz/corpora/cmp/ab6a410b82656ea3d967dbcf91b4269ada98a4a6 b/apps/insta.ca.crt
similarity index 69%
copy from fuzz/corpora/cmp/ab6a410b82656ea3d967dbcf91b4269ada98a4a6
copy to apps/insta.ca.crt
index 6eaf335124..6aea6d4f97 100644
Binary files a/fuzz/corpora/cmp/ab6a410b82656ea3d967dbcf91b4269ada98a4a6 and b/apps/insta.ca.crt differ
diff --git a/doc/man1/openssl-cmp.pod.in b/doc/man1/openssl-cmp.pod.in
index 45355cbdb3..8d3e686b55 100644
--- a/doc/man1/openssl-cmp.pod.in
+++ b/doc/man1/openssl-cmp.pod.in
@@ -991,8 +991,10 @@ to issue the following shell commands.
 
   cd /path/to/openssl
   export OPENSSL_CONF=openssl.cnf
+=begin comment
   wget 'http://pki.certificate.fi:8080/install-ca-cert.html/ca-certificate.crt\
         ?ca-id=632&download-certificate=1' -O insta.ca.crt
+=end comment
   openssl genrsa -out insta.priv.pem
   openssl cmp -section insta
 
@@ -1048,7 +1050,11 @@ or
 
 Many more options can be used in the configuration file
 and/or on the command line.
+For instance, the B<-reqexts> CLI option may refer to a section in the
+configuration file defining X.509 extensions to use in certificate requests,
+such as B<v3_req> in F<openssl/apps/openssl.cnf>:
 
+  openssl cmp -section insta,cr -reqexts v3_req
 
 =head2 Certificate enrollment