Check freshness on signatures.

[u/mdw/catacomb] / catsign.1

diff --git a/catsign.1 b/catsign.1
index 961edc3..596b76f 100644 (file)
--- a/catsign.1
+++ b/catsign.1
@@ -59,6 +59,8 @@ is one of:
 .IR tag ]
 .RB [ \-f
 .IR format ]
+.RB [ \-t
+.IR time ]
 .br
        
 .RB [ \-o
@@ -436,6 +438,7 @@ Read input encoded according to
 Produce more verbose messages.  See below for the messages produced
 during decryption.  The default verbosity level is 1.  (Currently this
 is the most verbose setting.  This might not be the case always.)
+.TP
 .B "\-q, \-\-quiet"
 Produce fewer messages.
 .TP
@@ -447,6 +450,15 @@ signature.  Using this option causes verification to fail unless the
 signature header specifies the key named
 .IR tag .
 .TP
+.BI "\-t, \-\-freshtime " time
+Only accept signatures claiming to have been made more recently than
+.IR time .
+If
+.I time
+is
+.B always
+(the default) then any timestamp in the past is acceptable.
+.TP
 .B "\-u, \-\-utc"
 Show the datestamp in the signature in UTC rather than (your) local
 time.  The synonym
@@ -497,7 +509,8 @@ All messages.
 All output written has been checked for authenticity.  However, output
 can fail madway through for many reasons, and the resulting message may
 therefore be truncated.  Don't rely on the output being complete until 
-.B OK is printed or
+.B OK
+is printed or
 .B catsign verify
 exits successfully.
 .SS info
@@ -595,13 +608,15 @@ message is expected on stdin (immediately after the signature, if any).
 The options follow a rough convention: options describing the input
 format are lower-case and options specifying the output format are
 upper-case.  The following options are recognized.
-.TP "\-a, \-\-armour-in"
+.TP
+.BI "\-a, \-\-armour-in"
 Read ASCII-armoured input.  This is equivalent to specifying
 .BR "\-f pem" .
 The variant spelling
 .B "\-\-armor"
 is also accepted.
-.TP "\-A, \-\-armour-out"
+.TP
+.BI "\-A, \-\-armour-out"
 Produce ASCII-armoured output.  This is equivalent to specifying
 .BR "\-F pem" .
 The variant spelling
@@ -657,7 +672,7 @@ Options provided are:
 Produce output in
 .IR format .
 Run
-.B catcrypt show enc
+.B catsign show enc
 for a list of encoding formats.
 .TP
 .BI "\-b, \-\-boundary " label
@@ -691,7 +706,7 @@ Options provided are:
 Decode input in
 .IR format .
 Run
-.B catcrypt show enc
+.B catsign show enc
 for a list of encoding formats.
 .TP
 .BI "\-b, \-\-boundary " label
@@ -703,7 +718,7 @@ between
 and 
 .BI "\-\-\-\-\-END " label "\-\-\-\-\-"
 lines.  Without this option,
-.B catcrypt
+.B catsign
 will start reading at the first plausible boundary string, and continue
 processing until it reaches the matching end boundary.
 .TP
@@ -726,4 +741,4 @@ the same file.
 .BR hashsum (1),
 .BR keyring (5).
 .SH AUTHOR
-Mark Wooding, <mdw@nsict.org>
+Mark Wooding, <mdw@distorted.org.uk>