This diff fixes the isakmpd(8) man page to use the more correct term
"X.509" instead of "X509".
It also changes the openssl req command to generate a 2048-bit RSA key
to be consistent with the recent change to the ssl(8) manpage
(src/share/man/man8/ssl.8, rev 1.47).
If you would like this to be split into two separate diffs, please let
me know and I will be happy to do so.
Lawrence
Index: isakmpd.8
===================================================================
RCS file: /cvs/src/sbin/isakmpd/isakmpd.8,v
retrieving revision 1.108
diff -u -p -r1.108 isakmpd.8
--- isakmpd.8 6 Jun 2011 08:05:05 -0000 1.108
+++ isakmpd.8 29 Sep 2011 02:55:21 -0000
@@ -556,10 +556,10 @@ Public keys are used to authenticate.
See
.Sx PUBLIC KEY AUTHENTICATION
below.
-.It X509 Certificates:
-X509 Certificates are used to authenticate.
+.It X.509 Certificates:
+X.509 Certificates are used to authenticate.
See
-.Sx X509 AUTHENTICATION
+.Sx X.509 AUTHENTICATION
below.
.It Keynote Certificates:
Keynote Certificates are used to authenticate.
@@ -628,8 +628,8 @@ In this example,
would also have to be set to IPV4_ADDR or IPV4_ADDR_SUBNET
in
.Xr isakmpd.conf 5 .
-.Sh X509 AUTHENTICATION
-X509 is a framework for public key certificates.
+.Sh X.509 AUTHENTICATION
+X.509 is a framework for public key certificates.
Certificates can be generated using
.Xr openssl 1
and provide a means for PKI authentication.
@@ -645,7 +645,7 @@ The CA certificate is named
and its private key
.Pa ca.key :
.Bd -literal -offset indent
-# openssl req -x509 -days 365 -newkey rsa:1024 \e
+# openssl req -x509 -days 365 -newkey rsa:2048 \e
-keyout /etc/ssl/private/ca.key \e
-out /etc/ssl/ca.crt
.Ed
