using stdout with certtool

[Daniel Kahn Gillmor]

hi folks--

i know certtool has an --output option, but it's nice when tools work
properly with stdout as well.

i just tried to make a self-signed cert like this:

 certtool --bits 1024 -s > ca.pem
 certtool --load-privkey ca.pem -s > cacert.pem

the series of prompts generated by the -s command came mostly to stderr,
which is the right thing to happen.  but a few of them went to stdout,
which made the process fairly confusing.

here are the prompts that went to stdout:

> Enter the certificate's serial number in decimal (default: 1299031308): 
> The certificate will expire in (days): 220
> Path length constraint (decimal, -1 for no constraint): 1

This is with gnutls-bin 2.10.4-2 in debian.

        --dkg

signature.asc
Description: OpenPGP digital signature