summaryrefslogtreecommitdiff
path: root/doc/apps/ca.pod
diff options
context:
space:
mode:
Diffstat (limited to 'doc/apps/ca.pod')
-rw-r--r--doc/apps/ca.pod9
1 files changed, 1 insertions, 8 deletions
diff --git a/doc/apps/ca.pod b/doc/apps/ca.pod
index d0a7703e61..5db7d9441c 100644
--- a/doc/apps/ca.pod
+++ b/doc/apps/ca.pod
@@ -585,8 +585,7 @@ if corrupted it can be difficult to fix. It is theoretically possible
to rebuild the index file from all the issued certificates and a current
CRL: however there is no option to do this.
-V2 CRL features like delta CRL support and CRL numbers are not currently
-supported.
+V2 CRL features like delta CRLs are not currently supported.
Although several requests can be input and handled at once it is only
possible to include one SPKAC or self signed certificate.
@@ -597,12 +596,6 @@ The use of an in memory text database can cause problems when large
numbers of certificates are present because, as the name implies
the database has to be kept in memory.
-It is not possible to certify two certificates with the same DN: this
-is a side effect of how the text database is indexed and it cannot easily
-be fixed without introducing other problems. Some S/MIME clients can use
-two certificates with the same DN for separate signing and encryption
-keys.
-
The B<ca> command really needs rewriting or the required functionality
exposed at either a command or interface level so a more friendly utility
(perl script or GUI) can handle things properly. The scripts B<CA.sh> and