Please review, Thanks, Ade
From 78f9e80b879cf403b72b0bed58d417b7e460ad97 Mon Sep 17 00:00:00 2001 From: Ade Lee <[email protected]> Date: Fri, 10 Jun 2016 05:42:09 -0400 Subject: [PATCH 323/324] Add man page info for number range parameters
Ticket 2318 --- base/server/man/man5/pki_default.cfg.5 | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/base/server/man/man5/pki_default.cfg.5 b/base/server/man/man5/pki_default.cfg.5 index 9be34983ace847248a1cca386d29a9d6bd88c121..550e2aa9cd5fe5352bc97e99de9ebb456b524340 100644 --- a/base/server/man/man5/pki_default.cfg.5 +++ b/base/server/man/man5/pki_default.cfg.5 @@ -324,6 +324,19 @@ The type of security used for the replication data. This can be set to SSL (usi Hostname and port, or URI of the subsystem being cloned. The URI format is https://<master_hostname>:<master_https_port> where the default master hostname and https port are set to be the security domain's hostname and https port. +.SS CA SERIAL NUMBER PARAMETERS +\x'-1'\fBpki_serial_number_range_start, pki_serial_number_range_end\fR +.IP +Sets the range of serial numbers to be used when issuing certificates. Values here are hexadecimal (without the 0x prefix). It is useful to override these values when migrating data from another CA, so that serial number conflicts do not occur. Defaults to 1 and 10000000 respectively. +.PP +.B pki_request_number_range_start, pki_request_number_range_end +.IP +Sets the range of request numbers to be used by the CA. Values here are decimal. It is useful to override these values when migrating data from another CA, so that request number conflicts do not occur. Defaults to 1 and 10000000 respectively. +.PP +.B pki_replica_number_range_start, pki_replica_number_range_end +.IP +Sets the range of replica numbers to be used by the CA. These numbers are used to identify database replicas in a replication topology. Values here are decimal. Defaults to 1 and 100 respectively. + .SS EXTERNAL CA CERTIFICATE PARAMETERS \x'-1'\fBpki_external\fR .IP -- 2.4.3
From a8cffba9643a007ce60a384ca1c34601aeccd522 Mon Sep 17 00:00:00 2001 From: Ade Lee <[email protected]> Date: Fri, 10 Jun 2016 10:11:43 -0400 Subject: [PATCH 324/324] Add man page entry for pki-server instance-cert-export command Ticket 2339 --- base/server/man/man8/pki-server-instance.8 | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/base/server/man/man8/pki-server-instance.8 b/base/server/man/man8/pki-server-instance.8 index b67fc4fce19b3bdeaae02c511b98dbcd66e4dba7..e6ce73da35a06c28138afadde3d63baef7d125fc 100644 --- a/base/server/man/man8/pki-server-instance.8 +++ b/base/server/man/man8/pki-server-instance.8 @@ -20,6 +20,7 @@ pki-server-instance \- Command-Line Interface for managing Certificate System in .SH SYNOPSIS .nf \fBpki-server [CLI options] instance\fR +\fBpki-server [CLI options] instance-cert-export\fR \fBpki-server [CLI options] instance-find\fR \fBpki-server [CLI options] instance-show\fR <instance ID> \fBpki-server [CLI options] instance-start\fR <instance ID> @@ -48,6 +49,15 @@ enabling or disabling password prompted instance startup using \fBnuxwdog\fR. This command is to list available instance commands. .RE .PP +\fBpki-server [CLI options] instance-cert-export\fR +.RS 4 +This command is to export system certificates and keys to a PKCS #12 file. The output +filename and either a password or a password file are required. If no nicknames +are specified, all the system certificates will be exported. Otherwise, it is +possible to extract individual certificates (with or without their keys and trust arguments), +and to append to an existing PKCS #12 file. +.RE +.PP \fBpki-server [CLI options] instance-find\fR .RS 4 This command is to list local CS instances. -- 2.4.3
_______________________________________________ Pki-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/pki-devel
