make-secnet-sites: Do not use `copy' in pubkey forsites

[secnet.git] / README.make-secnet-sites

diff --git a/README.make-secnet-sites b/README.make-secnet-sites
index 4fd594ea539bddeb050aac853ea5031613d85608..17af35c4266672d30166355d801f551b88bfc94a 100644 (file)
--- a/README.make-secnet-sites
+++ b/README.make-secnet-sites
@@ -34,6 +34,24 @@ USAGE
        produce Secnet configuration.
 
 
+OPTIONS
+
+       --output-version NUMBER
+
+               Write backward-compatible sites file output,
+               targeting a particular sites format.  Values of
+               NUMBER that are understood are:
+                   1   The original format, pre signing key
+                       negotiation.
+                   2   Signing key algorithm agility and negotiation.
+               If NUMBER is higher than make-secnet-sites supports,
+               it writes out what it can.
+
+       --debug | -D
+
+               Increase amount of debugging output.
+
+
 INPUT SYNTAX
 
        The input files have a simple line-based syntax.  Blank lines,
@@ -179,14 +197,15 @@ INPUT SYNTAX
                Assigns a public-key closure to the `key' key,
                constructed as `rsa-public(E, N)'.  The argument HUNOZ
                must be an integer, but is otherwise ignored; it's
-               conventionally the length of N in bits.  Acceptable only
-               at site level; required at site level.
+               conventionally the length of N in bits.
+               Acceptable only at site level.  See `pub'.
 
        mobile BOOL
                Assigns BOOL to the `mobile' key.  Acceptable only at
                site level, but optional.
 
        Properties which can also appear in public key files.
+       (named by `peer-keys' key to secnet sites closure.)
        These are acceptable to make-secnet-sites only at
        site level.  See also `Site long-term keys' in NOTES.
 
@@ -194,7 +213,8 @@ INPUT SYNTAX
                Defines a public key.  ALG is an algorithm name and
                DATA91S is the public key data, encoded according to
                secnet-base91 (see below).
-               Not yet suported in make-secnet-sites.
+               Gives make-public("ALG","DATAB91S") in sites.conf;
+               at least one `pub' or `pubkey' must be specified.
 
        serial SETIDHEX
                Specifies the key set id (8 hex digits representing
@@ -203,7 +223,9 @@ INPUT SYNTAX
                Not yet suported in make-secnet-sites.
 
        pkg GROUPIDHEX
+       pkgf GROUPIDHEX
                Specifies the key group id for subsequent keys.
+               pkgf indicates a fallback group.
                May be repeated (with different id values).
                If not specified, 00000000.
                Not yet suported in make-secnet-sites.