From 34aa4901412a1a73c8594b33e367c81af0305b97 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Fri, 8 Mar 2013 15:13:19 +0100 Subject: ipa-server-install: Remove the --selfsign option Instead, certificates in pkcs12 files can be given to set up IPA with no CA at all. Use a flag, setup_ca, to signal if a CA is being installed. Design: http://freeipa.org/page/V3/Drop_selfsign Part of the work for: https://fedorahosted.org/freeipa/ticket/3494 --- install/tools/man/ipa-server-install.1 | 5 ----- 1 file changed, 5 deletions(-) (limited to 'install/tools/man') diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index 7460868e3..6959a3147 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -116,11 +116,6 @@ The password of the Kerberos KDC PKCS#12 file .TP \fB\-\-subject\fR=\fISUBJECT\fR The certificate subject base (default O=REALM.NAME) -.TP -\fB\-\-selfsign\fR -Configure a self\-signed CA instance for issuing server certificates instead of using dogtag for certificates. - -WARNING: Using this option will restrain the server certificate management capabilities. Please, keep in mind that there is no way to change this setting later. .SS "DNS OPTIONS" .TP -- cgit