diff options
| -rw-r--r-- | usr.sbin/ikectl/ikectl.8 | 53 |
1 files changed, 27 insertions, 26 deletions
diff --git a/usr.sbin/ikectl/ikectl.8 b/usr.sbin/ikectl/ikectl.8 index fe00350d244..57d88121a2d 100644 --- a/usr.sbin/ikectl/ikectl.8 +++ b/usr.sbin/ikectl/ikectl.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ikectl.8,v 1.8 2010/09/30 10:36:24 reyk Exp $ +.\" $OpenBSD: ikectl.8,v 1.9 2010/10/01 07:08:25 jmc Exp $ .\" $vantronix: ikectl.8,v 1.11 2010/06/03 15:55:51 reyk Exp $ .\" .\" Copyright (c) 2007, 2008, 2009, 2010 Reyk Floeter <reyk@vantronix.net> @@ -15,7 +15,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: September 30 2010 $ +.Dd $Mdocdate: October 1 2010 $ .Dt IKECTL 8 .Os .Sh NAME @@ -181,6 +181,24 @@ Source the private key for from the named .Ar file . .El +.Sh FILES +.Bl -tag -width "/var/run/iked.sockXX" -compact +.It /etc/iked/ +Active configuration. +.It /etc/ssl/ +Directory to store the CA files. +.It /usr/share/iked +If this optional directory exists, +.Nm +will include the contents with the +.Cm ca export +commands. +.It /var/run/iked.sock +default +.Ux Ns -domain +socket used for communication with +.Xr iked 8 +.El .Sh EXAMPLES First create a new certificate authority: .Bd -literal -offset indent @@ -237,8 +255,9 @@ in addition to the tarballs if the zip tool is found in .Pa /usr/local/bin/zip . These archives can be exported to peers running Windows and will include the certificates in a format that is supported by the OS. -The zip tool can be installed from the OpenBSD packages or ports -collection before running the +The zip tool can be installed from the +.Ox +packages or ports collection before running the .Ic export commands, see .Xr packages 7 @@ -247,28 +266,10 @@ For example: .Bd -literal -offset indent # pkg_add zip .Ed -.Sh FILES -.Bl -tag -width "/var/run/iked.sockXX" -compact -.It /etc/iked/ -Active configuration. -.It /etc/ssl/ -Directory to store the CA files. -.It /usr/share/iked -If this optional directory exists, -.Nm -will include the contents with the -.Cm ca export -commands. -.It /var/run/iked.sock -default -.Ux Ns -domain -socket used for communication with -.Xr iked 8 -.El .Sh SEE ALSO -.Xr iked 8 , .Xr packages 7 , -.Xr ssl 8 , +.Xr iked 8 , +.Xr ssl 8 .Sh HISTORY The .Nm @@ -282,9 +283,9 @@ program was written by and .An Jonathan Gray Aq jsg@vantronix.net . .Sh CAVEATS -For the ease of use, the +For ease of use, the .Ic ca -commands will maintain all private keys of the peers on the CA machine. +commands maintain all peers' private keys on the CA machine. In contrast to a .Sq real CA, it does not support signing of public keys that have been imported |