X-Git-Url: http://git.hcoop.net/clinton/scripts.git/blobdiff_plain/73df01d433a07ba42606bd7b09eb9a210048181c..8a24cd39bdac42aa559cb2dfdec7c9fe70b592d2:/ca-sign

diff --git a/ca-sign b/ca-sign
index 953d289..a587cc0 100755
--- a/ca-sign
+++ b/ca-sign
@@ -4,7 +4,15 @@
 # admin.  If a domain is provided, then the certificate request must
 # apply only to that domain.
 #
+# Run this on deleuze as an admin.
+#
 # Usage: ca-sign days request.csr key.asc outfile.pem [domain]
+#
+# If we need to generate a new CA private key and cert, do:
+#
+# $ openssl genrsa -out private/ca.key 2048 -nodes
+# $ openssl req -config openssl.cnf -x509 -sha1 -days 3650 \
+#   -key private/ca.key -new -out ca.crt
 
 if test -n "$6" || test -z "$4"; then
     echo "Incorrect arguments."