Fix ipa-cacert-manage man page

When the admin runs ipa-cacert-manage install, he should also run
ipa-certupdate on master/replicas/clients in order to update the
certificates databases.

The man page should mention this requirement, and also clarify that
"install" command does not replace IPA CA but rather installs an
additional trusted CA.

https://fedorahosted.org/freeipa/ticket/6381

Reviewed-By: Petr Spacek <pspacek@redhat.com>
This commit is contained in:
Florence Blanc-Renaud 2016-10-05 14:04:23 +02:00 committed by Martin Basti
parent c3e3130a35
commit eb75578cbb

View File

@ -44,7 +44,9 @@ When the IPA CA is not configured, this command is not available.
\- Install a CA certificate
.sp
.RS
This command can be used to install the certificate contained in \fICERTFILE\fR as a new CA certificate to IPA.
This command can be used to install the certificate contained in \fICERTFILE\fR as an additional CA certificate to IPA.
.sp
Please do not forget to run ipa-certupdate on the master, all the replicas and all the clients after this command in order to update IPA certificates databases.
.RE
.SH "COMMON OPTIONS"
.TP