From eb75578cbb2447fc2fafb8a79d8500b27e3edff0 Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Wed, 5 Oct 2016 14:04:23 +0200 Subject: Fix ipa-cacert-manage man page When the admin runs ipa-cacert-manage install, he should also run ipa-certupdate on master/replicas/clients in order to update the certificates databases. The man page should mention this requirement, and also clarify that "install" command does not replace IPA CA but rather installs an additional trusted CA. https://fedorahosted.org/freeipa/ticket/6381 Reviewed-By: Petr Spacek --- install/tools/man/ipa-cacert-manage.1 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/install/tools/man/ipa-cacert-manage.1 b/install/tools/man/ipa-cacert-manage.1 index f0a1033ab..cb0be7124 100644 --- a/install/tools/man/ipa-cacert-manage.1 +++ b/install/tools/man/ipa-cacert-manage.1 @@ -44,7 +44,9 @@ When the IPA CA is not configured, this command is not available. \- Install a CA certificate .sp .RS -This command can be used to install the certificate contained in \fICERTFILE\fR as a new CA certificate to IPA. +This command can be used to install the certificate contained in \fICERTFILE\fR as an additional CA certificate to IPA. +.sp +Please do not forget to run ipa-certupdate on the master, all the replicas and all the clients after this command in order to update IPA certificates databases. .RE .SH "COMMON OPTIONS" .TP -- cgit