denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Add a note about constructing RFC 3779 compliant certificates to manpage

Browse Source
This commit is contained in:
Martin Willi
2017-02-27 09:36:48 +01:00
parent ead1dd3bcb
commit 2d7f940f11
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pki/man/pki---issue.1.in
+3
View File
@@ -153,6 +153,9 @@ Set path length constraint.
RFC 3779 address block to include in certificate. \fIblock\fR is either a RFC 3779 address block to include in certificate. \fIblock\fR is either a
CIDR subnet (such as \fI10.0.0.0/8\fR) or an arbitrary address range CIDR subnet (such as \fI10.0.0.0/8\fR) or an arbitrary address range
(\fI192.168.1.7-192.168.1.13\fR). Can be repeated to include multiple blocks. (\fI192.168.1.7-192.168.1.13\fR). Can be repeated to include multiple blocks.
Please note that the supplied blocks are included in the certificate as is,
so for standards compliance, multiple blocks must be supplied in correct
order and adjacent blocks must be combined. Refer to RFC 3779 for details.
.TP .TP
.BI "\-n, \-\-nc-permitted " name .BI "\-n, \-\-nc-permitted " name
Add permitted NameConstraint extension to certificate. For DNS or email Add permitted NameConstraint extension to certificate. For DNS or email
src/pki/man/pki---self.1.in
+3
View File
@@ -132,6 +132,9 @@ Set path length constraint.
RFC 3779 address block to include in certificate. \fIblock\fR is either a RFC 3779 address block to include in certificate. \fIblock\fR is either a
CIDR subnet (such as \fI10.0.0.0/8\fR) or an arbitrary address range CIDR subnet (such as \fI10.0.0.0/8\fR) or an arbitrary address range
(\fI192.168.1.7-192.168.1.13\fR). Can be repeated to include multiple blocks. (\fI192.168.1.7-192.168.1.13\fR). Can be repeated to include multiple blocks.
Please note that the supplied blocks are included in the certificate as is,
so for standards compliance, multiple blocks must be supplied in correct
order and adjacent blocks must be combined. Refer to RFC 3779 for details.
.TP .TP
.BI "\-n, \-\-nc-permitted " name .BI "\-n, \-\-nc-permitted " name
Add permitted NameConstraint extension to certificate. For DNS or email Add permitted NameConstraint extension to certificate. For DNS or email