From 6980b073035cdd43b30b58aba3ce7f84f16a14ad Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 11 Jul 2008 11:34:29 -0400 Subject: Rework the way SSL certificates are imported from PKCS#12 files. Add the ability to provide PKCS#12 files during initial installation Add the ability to provide PKCS#12 files when preparing a replica Correct some issues with ipa-server-certinstall 452402 --- ipa-server/man/ipa-server-certinstall.1 | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'ipa-server/man/ipa-server-certinstall.1') diff --git a/ipa-server/man/ipa-server-certinstall.1 b/ipa-server/man/ipa-server-certinstall.1 index 95067696..946ab9f8 100644 --- a/ipa-server/man/ipa-server-certinstall.1 +++ b/ipa-server/man/ipa-server-certinstall.1 @@ -26,8 +26,9 @@ Replace the current SSL Directory and/or Apache server certificate(s) with the c PKCS#12 is a file format used to safely transport SSL certificates and public/private keypairs. -They may be generated and managed using the NSS pk12util command or the OpeNSSL pkcs12 command. +They may be generated and managed using the NSS pk12util command or the OpenSSL pkcs12 command. +The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory and/or Apache servers. .SH "OPTIONS" .TP \fB\-d\fR, \fB\-\-dirsrv\fR @@ -35,6 +36,12 @@ Install the certificate on the Directory Server .TP \fB\-w\fR, \fB\-\-http\fR Install the certificate in the Apache Web Server +.TP +\fB\-\-dirsrv_pin\fR=\fIDIRSRV_PIN\fR +The password of the Directory Server PKCS#12 file +.TP +\fB\-\-http_pin\fR=\fIHTTP_PIN\fR +The password of the Apache Server PKCS#12 file .SH "EXIT STATUS" 0 if the installation was successful -- cgit