#  $Id: security_certrequest,v 1.10 2013-08-07 10:55:22 pc161604 Exp $
#  Copyright (c) 1999, 2013, Oracle and/or its affiliates. All rights reserved.
#  Strings for the tarantella security certrequest command

security_certrequest_desc="  certrequest   Creates a Certificate Signing Request (CSR)"

sf_certrequest_usage="Usage: tarantella security certrequest --country <country>  --state <state> 
  --orgname <org>  [ --ouname <ou> ]  [ --email <email> ]
  [ --locality <locality> ]  [ --keylength <length> ]
 - Generates a Certificate Signing Request (CSR).
 - Use \"tarantella security certrequest --help\" for detailed information."

lf_certrequest_usage="
tarantella security certrequest --country <country>  --state <state> 
  --orgname <org>  [ --ouname <ou> ]  [ --email <email> ]
  [ --locality <locality> ]  [ --keylength <length> ]

  Generates a Certificate Signing Request (CSR), and a public and
  private key pair. Send the generated CSR to a supported Certificate
  Authority (CA) to obtain a certificate for use with the
  $TSP_FULL_NAME.

  --country <country>     Two-letter ISO 3166 country code (example: US).
  --state <state>         State or province, in full (example: Massachusetts).
  --orgname <org>         Official, legal organization name.
  --ouname <ou>           Subdivision of your organization.
  --email <email>         Contact email address for certificate issues.
  --locality <locality>   City or principality.
  --keylength <length>    Length of key pair (default: 2048).
                          Recommended: 2048."


# Some required arguments missing
l_not_enough_args="You must specify your organization's country, state and official name."

# Q&A sequence for existing keyfile
l_keyfile_already_exists="\
A key file already exists. This means a certificate request has already been 
made.

Do you want to generate a new key pair? If you answer Yes, any existing
certificate request WILL NO LONGER BE VALID."
q_regen_key="Generate new key pair?"
l_not_generated="A new key pair was NOT generated."

# Something went wrong within the ssleay key/csr generation process
l_keygen_error="Error generating private key."
l_csrgen_error="Error generating certificate request."

l_csr_header="\
Send the following Certificate Signing Request (CSR) to a Certificate
Authority, such as VeriSign (www.verisign.com). Check with your CA 
that you're providing all the information they need.

------CUT HERE------"

l_csr_trailer="\
------CUT HERE------

When you receive your certificate, use 'tarantella security certuse'
or 'tarantella security enable' to install it.

For more information, see the $PRODUCT_SHORT_NAME Administration Guide."

l_cant_create_tspdir="Error: Unable to create directory for key file."

l_hostname_error="Error: Unable to determine the hostname."

l_random_error="Error: Unable to generate randomness for keys."

l_country_code="Country code must be 2 characters long."


#
# Check that the hostname is correct and it is what the user wants
#

# hostname between 1 and 2
l_host_info1="The certificate's common name (CN) will be:  "
l_host_info2="

This hostname is included in the Certificate Signing Request (CSR) and
corresponds to the name of the server that users will connect to.

 - If DNS names are used to connect to the server, the hostname above
   MUST be a fully qualified DNS name. 

 - If clients are required to connect to the server using an IP address, 
   the hostname above should be the IP address. A DNS record for this
   IP address SHOULD NOT exist.

For clients to accept the certificate once it's installed, a DNS
lookup of the hostname followed by a reverse lookup of the result must
return the original hostname.
"

l_additionalhostnames_question="Do you want to add any additional hostnames?"
l_host_altnames="Type in the subject alternative names for the certificate, one per line. Enter a blank line to finish."
l_host_subjectaltname="subjectAltName: "

l_host_ok_statement1="The hostname to be used in the certificate request is "
l_host_ok_statement2="."
l_host_ok_question="Do you want to use this hostname?"

l_host_incorrect_name_q="Enter the fully qualified hostname "

l_host_not_fq1="WARNING: \""
l_host_not_fq2="\" is not a fully qualified name."

l_host_bad_exit="
Didn't create a certificate request. No files have been overwritten."

h_csr_summary="Certificate Signing Request (CSR): Summary"

l_csr_ok_statement="The information above will be contained in the CSR."

l_csr_ok_question="Create CSR now?"

