Typo correction

[openssl.git] / doc / apps / ca.pod

diff --git a/doc/apps/ca.pod b/doc/apps/ca.pod
index d0a7703e61c0c6c361f1feed9e4a154025d4ef6d..42bae7f4a7069108a9839e4d36b4008a715989df 100644 (file)
--- a/doc/apps/ca.pod
+++ b/doc/apps/ca.pod
@@ -422,7 +422,7 @@ the same as B<-msie_hack>
 the same as B<-policy>. Mandatory. See the B<POLICY FORMAT> section
 for more information.
 
 the same as B<-policy>. Mandatory. See the B<POLICY FORMAT> section
 for more information.
 

-=item B<nameopt>, B<certopt>
+=item B<name_opt>, B<cert_opt>

 
 these options allow the format used to display the certificate details
 when asking the user to confirm signing. All the options supported by
 
 these options allow the format used to display the certificate details
 when asking the user to confirm signing. All the options supported by


@@ -544,8 +544,8 @@ A sample configuration file with the relevant sections for B<ca>:
  policy         = policy_any            # default policy
  email_in_dn    = no                    # Don't add the email into cert DN
 
  policy         = policy_any            # default policy
  email_in_dn    = no                    # Don't add the email into cert DN
 

- nameopt       = ca_default            # Subject name display option
- certopt       = ca_default            # Certificate display option
+ name_opt      = ca_default            # Subject name display option
+ cert_opt      = ca_default            # Certificate display option

  copy_extensions = none                        # Don't copy extensions from request
 
  [ policy_any ]
  copy_extensions = none                        # Don't copy extensions from request
 
  [ policy_any ]


@@ -585,8 +585,7 @@ if corrupted it can be difficult to fix. It is theoretically possible
 to rebuild the index file from all the issued certificates and a current
 CRL: however there is no option to do this.
 
 to rebuild the index file from all the issued certificates and a current
 CRL: however there is no option to do this.
 

-V2 CRL features like delta CRL support and CRL numbers are not currently
-supported.
+V2 CRL features like delta CRLs are not currently supported.

 
 Although several requests can be input and handled at once it is only
 possible to include one SPKAC or self signed certificate.
 
 Although several requests can be input and handled at once it is only
 possible to include one SPKAC or self signed certificate.


@@ -597,12 +596,6 @@ The use of an in memory text database can cause problems when large
 numbers of certificates are present because, as the name implies
 the database has to be kept in memory.
 
 numbers of certificates are present because, as the name implies
 the database has to be kept in memory.
 

-It is not possible to certify two certificates with the same DN: this
-is a side effect of how the text database is indexed and it cannot easily
-be fixed without introducing other problems. Some S/MIME clients can use
-two certificates with the same DN for separate signing and encryption
-keys.
-

 The B<ca> command really needs rewriting or the required functionality
 exposed at either a command or interface level so a more friendly utility
 (perl script or GUI) can handle things properly. The scripts B<CA.sh> and
 The B<ca> command really needs rewriting or the required functionality
 exposed at either a command or interface level so a more friendly utility
 (perl script or GUI) can handle things properly. The scripts B<CA.sh> and