clarifying usage for the -l -r option

3 files changed, 27 insertions, 12 deletions

diff --git a/pk12util.1 b/pk12util.1
index b87558a..deef1d0 100644
--- a/pk12util.1
+++ b/pk12util.1
@@ -128,7 +128,7 @@ Specify the desired length of the symmetric key to be used to encrypt the certif
 .B -r
 
 .IP
-Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in ASCII (a PEM file).
+Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in a pretty-print ASCII format, which displays the information about the certificates and public keys in the p12 file.
 
 .SH Return Codes 
 
@@ -247,9 +247,11 @@ Re-enter password:
 .PP
 The information in a 
 .B .p12
-file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable ASCII format or can be printed in a DER binary format (
+file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable pretty-print format that shows information for every certificate and any public keys in the 
+.B .p12
+file. Alternatively, the 
 .B -r
-) so that the output can be fed to another application, like OpenSSL.
+is used to print the certificates and then export them into separate DER binary files, with one certificate in each file. This allows the certificates to be fed to another application, like OpenSSL.
     
 .nf
 pk12util -l p12File [-h tokenname] [-r] [-d dir] [-P dbprefix] [-k slotPasswordFile|-K slotPassword] [-w p12filePasswordFile|-W p12filePassword]
@@ -283,7 +285,11 @@ Certificate:
 .PP
 For example, this uses the 
 .B -r
-argument to output the DER information:
+argument to output the DER information. Each certificate is also written to a sequentially-number file, beginning with 
+.B file0001.der
+and continuing through 
+.B file000N.der
+, incrementing the number for every certificate:
 .nf
 # pk12util -l test.p12 -r
 Enter password for PKCS12 file: 
diff --git a/pk12util.html b/pk12util.html
index 65489cc..2398aa2 100644
--- a/pk12util.html
+++ b/pk12util.html
@@ -170,7 +170,7 @@ Specify the desired length of the symmetric key to be used to encrypt the certif
 <DD>
 <P>
 <DT><DD>
-Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in ASCII (a PEM file).
+Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in a pretty-print ASCII format, which displays the information about the certificates and public keys in the p12 file.
 <P>
 </DL>
 <A NAME="lbAF">&nbsp;</A>
@@ -342,10 +342,13 @@ Re-enter password:
 The information in a 
 <B>.p12</B>
 
-file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable ASCII format or can be printed in a DER binary format (
+file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable pretty-print format that shows information for every certificate and any public keys in the 
+<B>.p12</B>
+
+file. Alternatively, the 
 <B>-r</B>
 
-) so that the output can be fed to another application, like OpenSSL.
+is used to print the certificates and then export them into separate DER binary files, with one certificate in each file. This allows the certificates to be fed to another application, like OpenSSL.
 <BR>&nbsp;&nbsp;&nbsp;&nbsp;
 <PRE>
 pk12util -l p12File [-h tokenname] [-r] [-d dir] [-P dbprefix] [-k slotPasswordFile|-K slotPassword] [-w p12filePasswordFile|-W p12filePassword]
@@ -383,7 +386,13 @@ Certificate:
 For example, this uses the 
 <B>-r</B>
 
-argument to output the DER information:
+argument to output the DER information. Each certificate is also written to a sequentially-number file, beginning with 
+<B>file0001.der</B>
+
+and continuing through 
+<B>file000N.der</B>
+
+, incrementing the number for every certificate:
 <PRE>
 # pk12util -l test.p12 -r
 Enter password for PKCS12 file: 
@@ -555,6 +564,6 @@ Authors: Elio Maldonado &lt;<A HREF="mailto:emaldona@redhat.com">emaldona@redhat
 This document was created by
 <A HREF="http://localhost/cgi-bin/man/man2html">man2html</A>,
 using the manual pages.<BR>
-Time: 22:45:32 GMT, August 19, 2010
+Time: 23:21:04 GMT, August 20, 2010
 </BODY>
 </HTML>
diff --git a/pk12util.xml b/pk12util.xml
index e5f0200..0f88b9f 100644
--- a/pk12util.xml
+++ b/pk12util.xml
@@ -134,7 +134,7 @@ common-options are:
 
       <varlistentry>
         <term>-r</term>
-        <listitem><para>Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in ASCII (a PEM file).</para></listitem>
+        <listitem><para>Dumps all of the data in raw (binary) form. This must be saved as a DER file. The default is to return information in a pretty-print ASCII format, which displays the information about the certificates and public keys in the p12 file.</para></listitem>
       </varlistentry>
     </variablelist>
   </refsection>
@@ -197,7 +197,7 @@ Enter password for PKCS12 file:
 Re-enter password: </programlisting>
 
     <para><command>Listing Keys and Certificates</command></para>
-    <para>The information in a <filename>.p12</filename> file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable ASCII format or can be printed in a DER binary format (<option>-r</option>) so that the output can be fed to another application, like OpenSSL.
+    <para>The information in a <filename>.p12</filename> file are not human-readable. The certificates and keys in the file can be printed (listed) in a human-readable pretty-print format that shows information for every certificate and any public keys in the <filename>.p12</filename> file. Alternatively, the <option>-r</option> is used to print the certificates and then export them into separate DER binary files, with one certificate in each file. This allows the certificates to be fed to another application, like OpenSSL.
     </para>
 <programlisting>pk12util -l p12File [-h tokenname] [-r] [-d dir] [-P dbprefix] [-k slotPasswordFile|-K slotPassword] [-w p12filePasswordFile|-W p12filePassword]</programlisting>
     <para>For example, this prints the default ASCII output:</para>
@@ -221,7 +221,7 @@ Certificate:
             A,OU=Certification Services Division,O=Thawte Consulting,L=Cape T
             own,ST=Western Cape,C=ZA"
 ....</programlisting>
-    <para>For example, this uses the <option>-r</option> argument to output the DER information:</para>
+    <para>For example, this uses the <option>-r</option> argument to output the DER information. Each certificate is also written to a sequentially-number file, beginning with <filename>file0001.der</filename> and continuing through <filename>file000N.der</filename>, incrementing the number for every certificate:</para>
 <programlisting language="Bash"># pk12util -l test.p12 -r
 Enter password for PKCS12 file: 
 Key(shrouded):