mk-ca-bundle.1: mention new -f, fix outputfile output
also edited a few sentences to become more verbose
This commit is contained in:
Родитель
cc4ac82bb6
Коммит
8f80f412fb
|
@ -1,26 +1,35 @@
|
||||||
.Dd April 27, 2012
|
.Dd Jan 5, 2013
|
||||||
.Dt MK-CA-BUNDLE 1
|
.Dt MK-CA-BUNDLE 1
|
||||||
.Os
|
.Os
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
.Nm mk-ca-bundle
|
.Nm mk-ca-bundle
|
||||||
.Nd create a new ca-bundle.crt from mozilla's certdata.txt
|
.Nd convert mozilla's certdata.txt to PEM format
|
||||||
.Sh SYNOPSIS
|
.Sh SYNOPSIS
|
||||||
.Nm
|
.Nm
|
||||||
.Op Fl bilnqtuv
|
.Op Fl bilnqtuv
|
||||||
.Or outputfile
|
[outputfile]
|
||||||
.Sh DESCRIPTION
|
.Sh DESCRIPTION
|
||||||
The
|
The
|
||||||
.Nm
|
.Nm
|
||||||
tool downloads the certdata.txt file from Mozilla's source tree, then
|
tool downloads the certdata.txt file from Mozilla's source tree over HTTP,
|
||||||
parses certdata.txt and extracts CA Root Certificates into PEM format.
|
then parses certdata.txt and extracts CA Root Certificates into PEM format.
|
||||||
These are then processed with the OpenSSL commandline tool to produce the
|
These are then processed with the OpenSSL commandline tool to produce the
|
||||||
final ca-bundle.crt file.
|
final ca-bundle file.
|
||||||
|
|
||||||
|
The default \fIoutputfile\fP name is \fBca-bundle.crt\fP. By setting it to '-'
|
||||||
|
(a single dash) you will get the output sent to STDOUT instead of a file.
|
||||||
|
|
||||||
|
The PEM format this scripts uses for output makes the result readily available
|
||||||
|
for use by just about all OpenSSL or GnuTLS powered applications, such as
|
||||||
|
curl, wget and more.
|
||||||
.Sh OPTIONS
|
.Sh OPTIONS
|
||||||
The following options are supported by
|
The following options are supported by
|
||||||
.Nm :
|
.Nm :
|
||||||
.Bl -tag -width _h
|
.Bl -tag -width _h
|
||||||
.It Fl b
|
.It Fl b
|
||||||
backup an existing version of ca-bundle.crt
|
backup an existing version of \fIoutputfilename\fP.
|
||||||
|
.It Fl f
|
||||||
|
force rebuild even if certdata.txt is current (Added in version 1.17)
|
||||||
.It Fl i
|
.It Fl i
|
||||||
print version info about used modules
|
print version info about used modules
|
||||||
.It Fl l
|
.It Fl l
|
||||||
|
@ -42,9 +51,11 @@ be verbose and print out processed CAs
|
||||||
.Xr curl 1
|
.Xr curl 1
|
||||||
.Sh HISTORY
|
.Sh HISTORY
|
||||||
.Nm
|
.Nm
|
||||||
was based on the parse-certs script written by
|
is a command line tool that is shipped as part of every curl and libcurl
|
||||||
|
release (see http://curl.haxx.se/). It was originally based on the parse-certs
|
||||||
|
script written by
|
||||||
.An Roland Krikava
|
.An Roland Krikava
|
||||||
and hacked by
|
and was later much improved by
|
||||||
.An Guenter Knauf .
|
.An Guenter Knauf .
|
||||||
This manual page was written by
|
This manual page was written by
|
||||||
.An Jan Schaumann
|
.An Jan Schaumann
|
||||||
|
|
Загрузка…
Ссылка в новой задаче