diff options
| author | Tomas Krizek <tkrizek@redhat.com> | 2017-03-01 18:45:52 +0100 |
|---|---|---|
| committer | Tomas Krizek <tkrizek@redhat.com> | 2017-03-02 17:02:25 +0100 |
| commit | 223a48b6d9916069971f79ab324ead26fa21c79d (patch) | |
| tree | 14e6a5220541805df7046fe7ee5bc2fb0e6480ad | |
| parent | 5e0ca17ca06ad26f291d4738766e194b3784c5bd (diff) | |
| download | freeipa-223a48b6d9916069971f79ab324ead26fa21c79d.tar.gz freeipa-223a48b6d9916069971f79ab324ead26fa21c79d.tar.xz freeipa-223a48b6d9916069971f79ab324ead26fa21c79d.zip | |
man: update ipa-cacert-manage
Make it clear this command is used to only renew certificate for
the CA and provide guidance on how to renew other certificates.
https://pagure.io/freeipa/issue/6648
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
| -rw-r--r-- | install/tools/man/ipa-cacert-manage.1 | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/install/tools/man/ipa-cacert-manage.1 b/install/tools/man/ipa-cacert-manage.1 index cb0be7124..4515d7c40 100644 --- a/install/tools/man/ipa-cacert-manage.1 +++ b/install/tools/man/ipa-cacert-manage.1 @@ -31,7 +31,7 @@ ipa\-cacert\-manage \- Manage CA certificates in IPA \- Renew the IPA CA certificate .sp .RS -This command can be used to manually renew the CA certificate of the IPA CA. +This command can be used to manually renew the CA certificate of the IPA CA (NSS database nickname: "caSigningCert cert-pki-ca"). To renew other certificates, use getcert-resubmit(1). .sp When the IPA CA is the root CA (the default), it is not usually necessary to manually renew the CA certificate, as it will be renewed automatically when it is about to expire, but you can do so if you wish. .sp @@ -100,3 +100,6 @@ p \- not trusted 0 if the command was successful 1 if an error occurred + +.SH "SEE ALSO" +.BR getcert-resubmit(1) |