From 5d743f19fd82af073af5c58ab64b13b083392e5a Mon Sep 17 00:00:00 2001
From: Elio Maldonado <emaldonado@fedoraproject.org>
Date: Tue, 4 Nov 2008 04:03:19 +0000
Subject: [PATCH] Clearer documentation

---
 genkey.xml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/genkey.xml b/genkey.xml
index 1842944..752206e 100644
--- a/genkey.xml
+++ b/genkey.xml
@@ -78,7 +78,7 @@
       <varlistentry>
         <term><option>--makeca</option></term>
         <listitem><simpara>Generate a Certificate Authority
-        keypair.</simpara></listitem>
+        keypair and certificate.</simpara></listitem>
       </varlistentry>
 
       <varlistentry>
@@ -93,8 +93,8 @@
         <term><option>--renew</option></term>
         <listitem><simpara>Used with --genreq to indicate a renewal,
         the existing keypair will be used. Certs and keys must reside
-         in the nss database. Pem file cert renewal is not currently
-         supported.</simpara></listitem>
+        in the nss database, therefore --nss is also required. Pem file
+        based cert renewal is not currently supported.</simpara></listitem>
       </varlistentry>
 
       <varlistentry>
@@ -133,7 +133,8 @@
 
     <para>The following example will create a self-signed certificate
     and private key for the hostname <literal>www.nssexample.com</literal>
-    which will be stored in cert and key in the nss database:
+    which will be stored in cert and key in the nss database. If no nickname
+    is given the tool will extract it from mod_nss's nss configuration file.
     
       <programlisting>
         # genkey --days --nss 120 www.nssexample.com