summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2016-09-27 09:51:56 +0200
committerNikos Mavrogiannopoulos <nmav@redhat.com>2016-09-27 10:21:52 +0200
commitaccd348c1034f4cb3e25d193fc4080b89977d1a1 (patch)
treec0b57ef782e8b0aadc60ba3a947454a43f0bb6cd
parent71f93ce83e42115e3cfa3d520f1e7815cbaab7be (diff)
downloadgnutls-tmp-pkcs11.tar.gz
p11tool: documented the p11-kit relevancy of distrust and stapledtmp-pkcs11
-rw-r--r--src/p11tool-args.def8
1 files changed, 6 insertions, 2 deletions
diff --git a/src/p11tool-args.def b/src/p11tool-args.def
index 4213238420..d29f5f1333 100644
--- a/src/p11tool-args.def
+++ b/src/p11tool-args.def
@@ -121,7 +121,9 @@ flag = {
flag = {
name = export-stapled;
descrip = "Export the certificate object specified by the URL";
- doc = "Exports the certificate specified by the URL while including any attached extensions to it.";
+ doc = "Exports the certificate specified by the URL while including any attached extensions to it.
+Since attached extensions are a p11-kit extension, this option is only
+available on p11-kit registered trust modules.";
flags-cant = export;
flags-cant = export-chain;
flags-cant = export-pubkey;
@@ -265,7 +267,9 @@ flag = {
flag = {
name = mark-distrusted;
descrip = "When retrieving objects, it requires the objects to be distrusted (blacklisted)";
- doc = "Ensures that the objects retrieved have the CKA_X_TRUST flag.";
+ doc = "Ensures that the objects retrieved have the CKA_X_TRUST flag.
+This is p11-kit trust module extension, thus this flag is only valid with
+p11-kit registered trust modules.";
flags_cant = mark-trusted;
};