On 5/11/2012 6:37 AM, Petr Vobornik wrote:
Instructions to generate certificate were changed. Now they use certutil
instead of openssl. In the example is also used option for specifying
key size.


This is already pushed, but the text probably could be improved a little bit, something like this:

1. Create a certificate database or use an existing one. To create a
   new database:
   # certutil -N -d <database path>
   See certutil documentation for more info.
2. Create a CSR with subject "CN=<hostname>,O=<realm>", for example:
   # certutil -R -d <database path> -a -g <key size>
     -s 'CN=test.example.com,O=EXAMPLE.COM'
3. Copy and paste the CSR (from "-----BEGIN NEW CERTIFICATE
   REQUEST-----" to "-----END NEW CERTIFICATE REQUEST-----") into the
   text area below:

Note, the '#' is meant to indicate the command prompt. The <em> tag was not quite visible, most likely people won't see the tooltips for key size, so it might be better to mention <key size> explicitly.

Endi S. Dewata

Freeipa-devel mailing list

Reply via email to