|
 |
7a8c6d |
From a05cc4f346011697b3a4b49abad809b00bc1105c Mon Sep 17 00:00:00 2001
|
|
|
7a8c6d |
From: Rob Crittenden <rcritten@redhat.com>
|
|
|
7a8c6d |
Date: Mon, 20 May 2019 16:37:23 -0400
|
|
|
7a8c6d |
Subject: [PATCH 26/29] Document key/cert file owner and mode options
|
|
|
7a8c6d |
|
|
|
7a8c6d |
The owner and permission options were available but not
|
|
|
7a8c6d |
documented either on the command-line or in the man page.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
Affects request, resubmit and start-tracking commands.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
https://bugzilla.redhat.com/show_bug.cgi?id=1549585
|
|
|
7a8c6d |
---
|
|
|
7a8c6d |
src/getcert-request.1.in | 8 ++++++++
|
|
|
7a8c6d |
src/getcert-resubmit.1.in | 8 ++++++++
|
|
|
7a8c6d |
src/getcert-start-tracking.1.in | 8 ++++++++
|
|
|
7a8c6d |
src/getcert.c | 12 ++++++++++++
|
|
|
7a8c6d |
4 files changed, 36 insertions(+)
|
|
|
7a8c6d |
|
|
|
7a8c6d |
diff --git a/src/getcert-request.1.in b/src/getcert-request.1.in
|
|
|
7a8c6d |
index 8269b78..691ba35 100644
|
|
|
7a8c6d |
--- a/src/getcert-request.1.in
|
|
|
7a8c6d |
+++ b/src/getcert-request.1.in
|
|
|
7a8c6d |
@@ -208,6 +208,14 @@ one to fail.
|
|
|
7a8c6d |
\fB\-v\fR
|
|
|
7a8c6d |
Be verbose about errors. Normally, the details of an error received from
|
|
|
7a8c6d |
the daemon will be suppressed if the client can make a diagnostic suggestion.
|
|
|
7a8c6d |
+\fB\-o\fR OWNER, --key-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the private key file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-m\fR MODE, --key-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the private key file or database to MODE.
|
|
|
7a8c6d |
+\fB\-O\fR OWNER, --cert-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the certificate file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-M\fR MODE, --cert-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the certificate file or database to MODE.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
.SH NOTES
|
|
|
7a8c6d |
Locations specified for key and certificate storage need to be
|
|
|
7a8c6d |
diff --git a/src/getcert-resubmit.1.in b/src/getcert-resubmit.1.in
|
|
|
7a8c6d |
index 62d5f28..89ea609 100644
|
|
|
7a8c6d |
--- a/src/getcert-resubmit.1.in
|
|
|
7a8c6d |
+++ b/src/getcert-resubmit.1.in
|
|
|
7a8c6d |
@@ -145,6 +145,14 @@ one to fail.
|
|
|
7a8c6d |
\fB\-v\fR
|
|
|
7a8c6d |
Be verbose about errors. Normally, the details of an error received from
|
|
|
7a8c6d |
the daemon will be suppressed if the client can make a diagnostic suggestion.
|
|
|
7a8c6d |
+\fB\-o\fR OWNER, --key-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the private key file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-m\fR MODE, --key-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the private key file or database to MODE.
|
|
|
7a8c6d |
+\fB\-O\fR OWNER, --cert-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the certificate file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-M\fR MODE, --cert-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the certificate file or database to MODE.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
.SH BUGS
|
|
|
7a8c6d |
Please file tickets for any that you find at https://fedorahosted.org/certmonger/
|
|
|
7a8c6d |
diff --git a/src/getcert-start-tracking.1.in b/src/getcert-start-tracking.1.in
|
|
|
7a8c6d |
index 9daeed3..e1c9dd4 100644
|
|
|
7a8c6d |
--- a/src/getcert-start-tracking.1.in
|
|
|
7a8c6d |
+++ b/src/getcert-start-tracking.1.in
|
|
|
7a8c6d |
@@ -181,6 +181,14 @@ the attempt to obtain a new one to fail.
|
|
|
7a8c6d |
\fB\-v\fR
|
|
|
7a8c6d |
Be verbose about errors. Normally, the details of an error received from
|
|
|
7a8c6d |
the daemon will be suppressed if the client can make a diagnostic suggestion.
|
|
|
7a8c6d |
+\fB\-o\fR OWNER, --key-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the private key file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-m\fR MODE, --key-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the private key file or database to MODE.
|
|
|
7a8c6d |
+\fB\-O\fR OWNER, --cert-owner=OWNER
|
|
|
7a8c6d |
+After generation set the owner on the certificate file or database to OWNER.
|
|
|
7a8c6d |
+\fB\-M\fR MODE, --cert-perms=MODE
|
|
|
7a8c6d |
+After generation set the file permissions on the certificate file or database to MODE.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
.SH NOTES
|
|
|
7a8c6d |
Locations specified for key and certificate storage need to be
|
|
|
7a8c6d |
diff --git a/src/getcert.c b/src/getcert.c
|
|
|
7a8c6d |
index 03af587..bddba29 100644
|
|
|
7a8c6d |
--- a/src/getcert.c
|
|
|
7a8c6d |
+++ b/src/getcert.c
|
|
|
7a8c6d |
@@ -4743,6 +4743,10 @@ help(const char *twopartcmd, const char *category)
|
|
|
7a8c6d |
N_(" -a NSS database in which to store the CA's certificates\n"),
|
|
|
7a8c6d |
N_(" -w try to wait for the certificate to be issued\n"),
|
|
|
7a8c6d |
N_(" -v report all details of errors\n"),
|
|
|
7a8c6d |
+ N_(" -o OWNER owner information for private key\n"),
|
|
|
7a8c6d |
+ N_(" -m MODE file permissions for private key\n"),
|
|
|
7a8c6d |
+ N_(" -O OWNER owner information for certificate\n"),
|
|
|
7a8c6d |
+ N_(" -M MODE file permissions for certificate\n"),
|
|
|
7a8c6d |
NULL,
|
|
|
7a8c6d |
};
|
|
|
7a8c6d |
const char *start_tracking_help[] = {
|
|
|
7a8c6d |
@@ -4793,6 +4797,10 @@ help(const char *twopartcmd, const char *category)
|
|
|
7a8c6d |
N_(" -a NSS database in which to store the CA's certificates\n"),
|
|
|
7a8c6d |
N_(" -w try to wait for the certificate to be issued\n"),
|
|
|
7a8c6d |
N_(" -v report all details of errors\n"),
|
|
|
7a8c6d |
+ N_(" -o OWNER owner information for private key\n"),
|
|
|
7a8c6d |
+ N_(" -m MODE file permissions for private key\n"),
|
|
|
7a8c6d |
+ N_(" -O OWNER owner information for certificate\n"),
|
|
|
7a8c6d |
+ N_(" -M MODE file permissions for certificate\n"),
|
|
|
7a8c6d |
NULL,
|
|
|
7a8c6d |
};
|
|
|
7a8c6d |
const char *stop_tracking_help[] = {
|
|
|
7a8c6d |
@@ -4865,6 +4873,10 @@ help(const char *twopartcmd, const char *category)
|
|
|
7a8c6d |
N_(" -a NSS database in which to store the CA's certificates\n"),
|
|
|
7a8c6d |
N_(" -w try to wait for the certificate to be issued\n"),
|
|
|
7a8c6d |
N_(" -v report all details of errors\n"),
|
|
|
7a8c6d |
+ N_(" -o OWNER owner information for private key\n"),
|
|
|
7a8c6d |
+ N_(" -m MODE file permissions for private key\n"),
|
|
|
7a8c6d |
+ N_(" -O OWNER owner information for certificate\n"),
|
|
|
7a8c6d |
+ N_(" -M MODE file permissions for certificate\n"),
|
|
|
7a8c6d |
NULL,
|
|
|
7a8c6d |
};
|
|
|
7a8c6d |
const char *rekey_help[] = {
|
|
|
7a8c6d |
--
|
|
|
7a8c6d |
2.17.2
|
|
|
7a8c6d |
|