From aef6b23708fe0626a47d3084288b51d0bf1aebcb Mon Sep 17 00:00:00 2001
From: Elio Maldonado <emaldonado@fedoraproject.org>
Date: Wed, 7 May 2008 16:37:50 +0000
Subject: [PATCH] Document location of the keys when using the nss database
 (#346731)

---
 genkey.xml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/genkey.xml b/genkey.xml
index d6d9147..50b3574 100644
--- a/genkey.xml
+++ b/genkey.xml
@@ -34,10 +34,7 @@
       <group>
         <arg><option>--genreq</option></arg>
         <arg><option>--makeca</option></arg>
-      </group>
-      <group>
         <arg><option>--nss</option></arg>
-        <arg><option>--debug</option>
       </group>
       <arg choice="req"><replaceable>hostname</replaceable></arg>
     </cmdsynopsis>
@@ -51,8 +48,12 @@
     Signing Requests (CSR).  Generated certificates are stored in the
     directory <filename>/etc/pki/tls/certs/</filename>, and the
     corresponding private key in
-    <filename>/etc/pki/tls/private/</filename>. If using mod_nss
-    they are stored in the nss key and certficate databases. </para>
+    <filename>/etc/pki/tls/private/</filename>. </para>
+
+    <para>When using mod_nss the private key is stored in the
+    nss database. Consult the nss.conf file in
+    <filename>/etc/httpd/conf.d/</filename>
+    for the location of the database. </para>
 
     <para><command>genkey</command> will prompt for the size of key
     desired; whether or not to generate a CSR; whether or not an
@@ -66,8 +67,6 @@
     <para><option>nss</option> indicates that mod_nss database 
     should be used to store keys and certificates.</para>
 
-    <para><option>debug</option> set this flag to enable debug logs.</para>
-
   </refsect1>
   
   <refsect1>