summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/cert.py
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-08-24 23:40:32 -0400
committerRob Crittenden <rcritten@redhat.com>2010-08-27 13:31:04 -0400
commit4b6b710ba6ce75ffcb9ced43acee0d55adb6163c (patch)
tree021fc409342115f1a5cbc1978ee5f67069934c4f /ipalib/plugins/cert.py
parentea76d8c59af338f6a79ec87d7a931d2c8643e747 (diff)
downloadfreeipa-4b6b710ba6ce75ffcb9ced43acee0d55adb6163c.tar.gz
freeipa-4b6b710ba6ce75ffcb9ced43acee0d55adb6163c.tar.xz
freeipa-4b6b710ba6ce75ffcb9ced43acee0d55adb6163c.zip
Update command documentation based on feedback from docs team.
ticket #158
Diffstat (limited to 'ipalib/plugins/cert.py')
-rw-r--r--ipalib/plugins/cert.py17
1 files changed, 10 insertions, 7 deletions
diff --git a/ipalib/plugins/cert.py b/ipalib/plugins/cert.py
index 8920cfe4f..1154e2e30 100644
--- a/ipalib/plugins/cert.py
+++ b/ipalib/plugins/cert.py
@@ -24,7 +24,7 @@ IPA certificate operations
Implements a set of commands for managing server SSL certificates.
-Certificate request come in the form of a Certificate Signing Request (CSR)
+Certificate request exist in the form of a Certificate Signing Request (CSR)
in PEM format.
If using the selfsign backend then the subject in the CSR needs to match
@@ -32,15 +32,16 @@ the subject configured in the server. The dogtag CA uses just the CN
value of the CSR and forces the rest of the subject.
A certificate is stored with a service principal and a service principal
-needs a host. So in order to request a certificate the following conditions
-must be met:
+needs a host.
-* The host exists
-* The service exists (or you use the --add option to automatically add it)
+In order to request a certificate:
+
+* The host must exist
+* The service must exist (or you use the --add option to automatically add it)
EXAMPLES:
- Request a new certificate, add the principal:
+ Request a new certificate and add the principal:
ipa cert-request --add --principal=HTTP/lion.example.com example.csr
Retrieve an existing certificate:
@@ -55,7 +56,9 @@ EXAMPLES:
Check the status of a signing request:
ipa cert-status 10
-IPA currently immediately issues (or declines) all certificate requests.
+IPA currently immediately issues (or declines) all certificate requests so
+the status of a request is not normally useful. This is for future-use
+or the case where a CA does not immediately issue a certificate.
"""
from ipalib import api, SkipPluginModule