RT3940: For now, just document the issue. Reviewed-by: Richard Levitte <levitte@openssl.org>
diff --git a/doc/apps/cms.pod b/doc/apps/cms.pod index b654613..d5529be 100644 --- a/doc/apps/cms.pod +++ b/doc/apps/cms.pod
@@ -122,6 +122,9 @@ to be encrypted. The output file is the encrypted mail in MIME format. The actual CMS type is <B>EnvelopedData<B>. +Note that no revocation check is done for the recipient cert, so if that +key has been compromised, others may be able to decrypt the text. + =item B<-decrypt> decrypt mail using the supplied certificate and private key. Expects an
diff --git a/doc/apps/smime.pod b/doc/apps/smime.pod index 2c7661d..ba59eda 100644 --- a/doc/apps/smime.pod +++ b/doc/apps/smime.pod
@@ -90,6 +90,9 @@ encrypt mail for the given recipient certificates. Input file is the message to be encrypted. The output file is the encrypted mail in MIME format. +Note that no revocation check is done for the recipient cert, so if that +key has been compromised, others may be able to decrypt the text. + =item B<-decrypt> decrypt mail using the supplied certificate and private key. Expects an