diff options
author | Florence Blanc-Renaud <flo@redhat.com> | 2016-10-05 14:04:23 +0200 |
---|---|---|
committer | Martin Basti <mbasti@redhat.com> | 2016-10-11 16:00:36 +0200 |
commit | eb75578cbb2447fc2fafb8a79d8500b27e3edff0 (patch) | |
tree | acab221ffa6df9f37140f7262f1bae0ea6f4aaad | |
parent | c3e3130a35f05348405701731ec2d5b85a772997 (diff) | |
download | freeipa-eb75578cbb2447fc2fafb8a79d8500b27e3edff0.tar.gz freeipa-eb75578cbb2447fc2fafb8a79d8500b27e3edff0.tar.xz freeipa-eb75578cbb2447fc2fafb8a79d8500b27e3edff0.zip |
Fix ipa-cacert-manage man page
When the admin runs ipa-cacert-manage install, he should also run
ipa-certupdate on master/replicas/clients in order to update the
certificates databases.
The man page should mention this requirement, and also clarify that
"install" command does not replace IPA CA but rather installs an
additional trusted CA.
https://fedorahosted.org/freeipa/ticket/6381
Reviewed-By: Petr Spacek <pspacek@redhat.com>
-rw-r--r-- | install/tools/man/ipa-cacert-manage.1 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/install/tools/man/ipa-cacert-manage.1 b/install/tools/man/ipa-cacert-manage.1 index f0a1033ab..cb0be7124 100644 --- a/install/tools/man/ipa-cacert-manage.1 +++ b/install/tools/man/ipa-cacert-manage.1 @@ -44,7 +44,9 @@ When the IPA CA is not configured, this command is not available. \- Install a CA certificate .sp .RS -This command can be used to install the certificate contained in \fICERTFILE\fR as a new CA certificate to IPA. +This command can be used to install the certificate contained in \fICERTFILE\fR as an additional CA certificate to IPA. +.sp +Please do not forget to run ipa-certupdate on the master, all the replicas and all the clients after this command in order to update IPA certificates databases. .RE .SH "COMMON OPTIONS" .TP |