diff options
author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-09-27 09:51:56 +0200 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-09-27 10:21:52 +0200 |
commit | accd348c1034f4cb3e25d193fc4080b89977d1a1 (patch) | |
tree | c0b57ef782e8b0aadc60ba3a947454a43f0bb6cd | |
parent | 71f93ce83e42115e3cfa3d520f1e7815cbaab7be (diff) | |
download | gnutls-tmp-pkcs11.tar.gz |
p11tool: documented the p11-kit relevancy of distrust and stapledtmp-pkcs11
-rw-r--r-- | src/p11tool-args.def | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/src/p11tool-args.def b/src/p11tool-args.def index 4213238420..d29f5f1333 100644 --- a/src/p11tool-args.def +++ b/src/p11tool-args.def @@ -121,7 +121,9 @@ flag = { flag = { name = export-stapled; descrip = "Export the certificate object specified by the URL"; - doc = "Exports the certificate specified by the URL while including any attached extensions to it."; + doc = "Exports the certificate specified by the URL while including any attached extensions to it. +Since attached extensions are a p11-kit extension, this option is only +available on p11-kit registered trust modules."; flags-cant = export; flags-cant = export-chain; flags-cant = export-pubkey; @@ -265,7 +267,9 @@ flag = { flag = { name = mark-distrusted; descrip = "When retrieving objects, it requires the objects to be distrusted (blacklisted)"; - doc = "Ensures that the objects retrieved have the CKA_X_TRUST flag."; + doc = "Ensures that the objects retrieved have the CKA_X_TRUST flag. +This is p11-kit trust module extension, thus this flag is only valid with +p11-kit registered trust modules."; flags_cant = mark-trusted; }; |