1 files changed, 129 insertions, 0 deletions
diff --git a/man/makecert.1 b/man/makecert.1
new file mode 100755
index 00000000000..3a1b1053036
--- /dev/null
+++ b/man/makecert.1
@@ -0,0 +1,129 @@
+.\" 
+.\" makecert manual page.
+.\" Copyright 2003 Motus Technologies
+.\" Copyright 2004 Novell
+.\" Author:
+.\"   Sebastien Pouliot (sebastien@ximian.com)
+.\"
+.TH Mono "MakeCert"
+.SH NAME
+MakeCert \- Create X.509 certificates for test purposes
+.SH SYNOPSIS
+.PP
+.B makecert [options] certificate
+.SH DESCRIPTION
+Create an X.509 certificate using the provided informations. This
+is useful for testing Authenticode signatures, SSL and S/MIME
+technologies.
+.SH PARAMETERS
+.TP
+.I "-# num"
+Specify the certificate serial number.
+.TP
+.I "-n dn"
+Specify the subject Distinguished Name (DN).
+.TP
+.I "-in dn"
+Specify the issuer Distinguished Name (DN).
+.TP
+.I "-r"
+Create a self-signed, also called root, certificate.
+.TP
+.I "-iv pvkfile"
+Specify the private key file (.PVK) for the issuer. The private key in the 
+specified file will be used to sign the new certificate.
+.TP
+.I "-ic certfile"
+Extract the issuer's name from the specified certificate file - i.e. the
+subject name of the specified certificate becomes the issuer name of the
+new certificate.
+.TP
+.I "-in name"
+Use the issuer's name from the specified parameter.
+.TP
+.I "-ik container"
+Specify the key container name to be used for the issuer.
+.TP
+.I "-iky [signature | exchange | #]"
+Specify the key number to be used in the provider (when used with -ik).
+.TP
+.I "-ip provider"
+Specify the cryptographic provider to be used for the issuer.
+.TP
+.I "-ir [localmachine | currentuser]"
+Specify the provider will search the user or the machine keys containers for
+the issuer.
+.TP
+.I "-iy number"
+Specify the provider type to be used for the issuer.
+.TP
+.I "-sv pkvfile"
+Specify the private key file (.PVK) for the subject. The public part of the
+key will be inserted into the created certificate. If non-existant the 
+specified file will be created with a new key pair (default to 1024 bits RSA
+key pair).
+.TP
+.I "-sk container"
+Specify the key container name to be used for the subject.
+.TP
+.I "-sky [signature | exchange | #]"
+Specify the key number to be used in the provider (when used with -sk).
+.TP
+.I "-sp provider"
+Specify the cryptographic provider to be used for the subject.
+.TP
+.I "-sr [localmachine | currentuser]"
+Specify the provider will search the user or the machine keys containers for
+the subject.
+.TP
+.I "-sy number"
+Specify the provider type to be used for the issuer.
+.TP
+.I "-a hash"
+Select hash algorithm. Only MD5 and SHA1 algorithms are supported.
+.TP
+.I "-b date"
+The date since when the certificate is valid (notBefore).
+.TP
+.I "-e date"
+The date until when the certificate is valid (notAfter).
+.TP
+.I "-m number"
+Specify the certificate validity period in months. This is added to the
+notBefore validity date which can be set with -b or will default to the 
+current date/time.
+.TP
+.I "-cy [authority|end]"
+Basic constraints. Select Authority or End-Entity certificate. Only Authority
+certificates can be used to sign other certificates (-ic). End-Entity can
+be used by clients (e.g. Authenticode, S/MIME) or servers (e.g. SSL).
+.TP
+.I "-h number"
+Add a path length restriction to the certificate chain. This is only 
+applicable for certificates that have BasicConstraint set to Authority (-cy 
+authority). This is used to limit the chain of certificates than can be
+issued under this authority.
+.TP
+.I "-eku oid[,oid]"
+Add some extended key usage OID to the certificate.
+.TP
+.I "-?"
+Help (display this help message)
+.TP
+.I "-!"
+Extended help (for advanced options)
+.SH KNOWN RESTRICTIONS
+Compared to the Windows version some options aren't supported (-$, -d, -l, 
+-nscp, -is, -sc, -ss). Also PVK files with passwords aren't supported.
+.SH AUTHOR
+Written by Sebastien Pouliot
+.SH COPYRIGHT
+Copyright (C) 2003 Motus Technologies. 
+Copyright (C) 2004 Novell. 
+Released under BSD license.
+.SH MAILING LISTS
+Visit http://mail.ximian.com/mailman/mono-list for details.
+.SH WEB SITE
+Visit: http://www.go-mono.com for details
+.SH SEE ALSO
+.BR signcode(1)