summaryrefslogtreecommitdiff
path: root/usr/src/man/man1m/ikecert.1m
diff options
context:
space:
mode:
Diffstat (limited to 'usr/src/man/man1m/ikecert.1m')
-rw-r--r--usr/src/man/man1m/ikecert.1m18
1 files changed, 4 insertions, 14 deletions
diff --git a/usr/src/man/man1m/ikecert.1m b/usr/src/man/man1m/ikecert.1m
index 601cb47f68..da2a53cd08 100644
--- a/usr/src/man/man1m/ikecert.1m
+++ b/usr/src/man/man1m/ikecert.1m
@@ -3,12 +3,11 @@
.\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License. You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing.
.\" See the License for the specific language governing permissions and limitations under the License. When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with
.\" the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
-.TH IKECERT 1M "April 9, 2016"
+.TH IKECERT 1M "June 20, 2021"
.SH NAME
ikecert \- manipulates the machine's on-filesystem public-key certificate
databases
.SH SYNOPSIS
-.LP
.nf
\fBikecert\fR certlocal
[\fB-a\fR | \fB-e\fR | \fB-h\fR | \fB-k\fR | \fB-l\fR | \fB-r\fR | \fB-U\fR | \fB-C\fR | \fB-L\fR]
@@ -35,7 +34,6 @@ databases
.fi
.SH DESCRIPTION
-.LP
The \fBikecert\fR command manipulates the machine's on-filesystem public-key
certificate databases. See the "Files" section, below.
.sp
@@ -72,7 +70,6 @@ repository.
The only supported PKCS#11 library and hardware is the Sun Cryptographic
Accelerator 4000.
.SH OPTIONS
-.LP
Except for \fBtokens\fR, each subcommand requires one option, possibly followed
by one or more option-specific arguments.
.sp
@@ -234,7 +231,7 @@ matches in the database is extracted. See \fBNOTES\fR, below, for details on
When specified with the \fBcertlocal\fR subcommand, this option generates a IKE
public/private key pair and adds it into the local ID database. It also
generates a certificate request and sends that to standard output. For details
-on the above options see for details on the \fIdname\fR argument and see
+on the above options see for details on the \fIdname\fR argument and see
ALTERNATIVE NAMES for details on the \fIaltname\fR argument(s) to this command.
.sp
If \fB-T\fR is specified, the hardware token will generate the pair of keys.
@@ -331,7 +328,7 @@ The list displays the identity string of the certificates, as well as, the
private key if in the key database. The \fB-v\fR switches the output to a
verbose mode where the entire certificate is printed.
.sp
-If the matching ceritifcate is on a hardware token, the token ID is also
+If the matching certificate is on a hardware token, the token ID is also
listed.
.RE
@@ -346,7 +343,7 @@ When specified with the \fBcertrldb\fR subcommand, this option lists the CRLs
in the IKE database along with any certificates that reside in the database and
match the Issuer Name. \fBcertspec\fR can be used to specify to list a specific
CRL. The \fB-v\fR option switches the output to a verbose mode where the entire
-certificate is printed. See \fBNOTES\fR, below, for details on\fBcertspec\fR
+certificate is printed. See \fBNOTES\fR, below, for details on \fBcertspec\fR
patterns.
.RE
@@ -541,7 +538,6 @@ token with \fBikeadm\fR(1M) once \fBin.iked\fR(1M) is running.
.RE
.SH PARAMETERS
-.LP
The following parameters are supported:
.sp
.ne 2
@@ -726,7 +722,6 @@ instance.
.RE
.SH SECURITY
-.LP
This command can save private keys of a public-private key pair into a file.
Any exposure of a private key may lead to compromise if the key is somehow
obtained by an adversary.
@@ -748,7 +743,6 @@ Refer to the afterword by Matt Blaze in Bruce Schneier's \fIApplied
Cryptography: Protocols, Algorithms, and Source Code in C\fR for additional
information.
.SH EXAMPLES
-.LP
\fBExample 1 \fRGenerating a Self-Signed Certificate
.sp
.LP
@@ -809,7 +803,6 @@ example# \fB# ikecert certlocal -kc -m 1024 -t rsa-md5 -T vca0-keystore \e
.sp
.SH EXIT STATUS
-.LP
The following exit values are returned:
.sp
.ne 2
@@ -874,7 +867,6 @@ Consulted for the pathname of a PKCS#11 library.
.RE
.SH ATTRIBUTES
-.LP
See \fBattributes\fR(5) for descriptions of the following attributes:
.sp
@@ -889,7 +881,6 @@ Interface Stability Evolving
.TE
.SH SEE ALSO
-.LP
\fBikeadm\fR(1M), \fBin.iked\fR(1M), \fBgetdate\fR(3C), \fBike.config\fR(4),
\fBattributes\fR(5), \fBpkcs11_softtoken\fR(5)
.sp
@@ -901,7 +892,6 @@ Code in C\fR. Second Edition. John Wiley & Sons. New York, NY. 1996.
RSA Labs, PKCS#11 v2.11: \fICryptographic Token Interface Standards\fR,
November 2001.
.SH NOTES
-.LP
The following is the validity date and time syntax when the \fB-F\fR or
\fB-S\fR flags are used:
.sp