summaryrefslogtreecommitdiffstats
path: root/install/tools/man/ipa-server-install.1
diff options
context:
space:
mode:
authorJan Cholasta <jcholast@redhat.com>2014-09-24 16:48:15 +0200
committerMartin Kosek <mkosek@redhat.com>2014-09-30 08:50:47 +0200
commit3cde7e9cfd7908b24082e3e50cdd0955726223d0 (patch)
tree235ef572fd448a2246b5a9ede1787f5250e6ffb9 /install/tools/man/ipa-server-install.1
parent88083887c994ab505d6e07151e5dd26b56bb7732 (diff)
downloadfreeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.tar.gz
freeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.tar.xz
freeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.zip
Allow choosing CA-less server certificates by name
Added new --*-cert-name options to ipa-server-install and ipa-replica-prepare and --cert-name option to ipa-server-certinstall. The options allows choosing a particular certificate and private key from PKCS#12 files by its friendly name. https://fedorahosted.org/freeipa/ticket/4489 Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'install/tools/man/ipa-server-install.1')
-rw-r--r--install/tools/man/ipa-server-install.19
1 files changed, 9 insertions, 0 deletions
diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1
index 0bd59687d..582108e6f 100644
--- a/install/tools/man/ipa-server-install.1
+++ b/install/tools/man/ipa-server-install.1
@@ -111,6 +111,15 @@ The password to unlock the Apache Server private key
\fB\-\-pkinit\-pin\fR=\fIPIN\fR
The password to unlock the Kerberos KDC private key
.TP
+\fB\-\-dirsrv\-cert\-name\fR=\fINAME\fR
+Name of the Directory Server SSL certificate to install
+.TP
+\fB\-\-http\-cert\-name\fR=\fINAME\fR
+Name of the Apache Server SSL certificate to install
+.TP
+\fB\-\-pkinit\-cert\-name\fR=\fINAME\fR
+Name of the Kerberos KDC SSL certificate to install
+.TP
\fB\-\-ca\-cert\-file\fR=\fIFILE\fR
File containing the CA certificate of the CA which issued the Directory Server, Apache Server and Kerberos KDC certificates. The file is accepted in PEM and DER certificate and PKCS#7 certificate chain formats. This option may be used multiple times. Use this option if the CA certificate is not present in the certificate files.
.TP