diff --git a/genkey.xml b/genkey.xml index 4af4e31..1842944 100644 --- a/genkey.xml +++ b/genkey.xml @@ -92,7 +92,9 @@ Used with --genreq to indicate a renewal, - the existing keypair will be used. + the existing keypair will be used. Certs and keys must reside + in the nss database. Pem file cert renewal is not currently + supported. @@ -128,6 +130,37 @@ + + The following example will create a self-signed certificate + and private key for the hostname www.nssexample.com + which will be stored in cert and key in the nss database: + + + # genkey --days --nss 120 www.nssexample.com + + + + + The following example will generate a certificate signing + request for a new mod_nss style cert specified by its nickname, + Server-Cert: + + + # genkey --genreq --nss --days 120 Server-Cert + + + + + The following example will generate a certificate signing request + for the renewal of an existing mod_nss cert specified by its nickname, + Server-Cert: + + + # genkey --genreq --renew --nss --days 120 Server-Cert + + + +