On Wed, Sep 28, 2011 at 11:28:02PM -0400, Lawrence Teo wrote: > This diff fixes the isakmpd(8) man page to use the more correct term > "X.509" instead of "X509". > > It also changes the openssl req command to generate a 2048-bit RSA key > to be consistent with the recent change to the ssl(8) manpage > (src/share/man/man8/ssl.8, rev 1.47). > > If you would like this to be split into two separate diffs, please let > me know and I will be happy to do so. > > Lawrence >
fixed, thanks. jmc > Index: isakmpd.8 > =================================================================== > RCS file: /cvs/src/sbin/isakmpd/isakmpd.8,v > retrieving revision 1.108 > diff -u -p -r1.108 isakmpd.8 > --- isakmpd.8 6 Jun 2011 08:05:05 -0000 1.108 > +++ isakmpd.8 29 Sep 2011 02:55:21 -0000 > @@ -556,10 +556,10 @@ Public keys are used to authenticate. > See > .Sx PUBLIC KEY AUTHENTICATION > below. > -.It X509 Certificates: > -X509 Certificates are used to authenticate. > +.It X.509 Certificates: > +X.509 Certificates are used to authenticate. > See > -.Sx X509 AUTHENTICATION > +.Sx X.509 AUTHENTICATION > below. > .It Keynote Certificates: > Keynote Certificates are used to authenticate. > @@ -628,8 +628,8 @@ In this example, > would also have to be set to IPV4_ADDR or IPV4_ADDR_SUBNET > in > .Xr isakmpd.conf 5 . > -.Sh X509 AUTHENTICATION > -X509 is a framework for public key certificates. > +.Sh X.509 AUTHENTICATION > +X.509 is a framework for public key certificates. > Certificates can be generated using > .Xr openssl 1 > and provide a means for PKI authentication. > @@ -645,7 +645,7 @@ The CA certificate is named > and its private key > .Pa ca.key : > .Bd -literal -offset indent > -# openssl req -x509 -days 365 -newkey rsa:1024 \e > +# openssl req -x509 -days 365 -newkey rsa:2048 \e > -keyout /etc/ssl/private/ca.key \e > -out /etc/ssl/ca.crt > .Ed
