#  $Id: security_certuse,v 1.10 2008-05-29 12:53:45 jm199791 Exp $
#  Copyright 2008 Sun Microsystems, Inc. All rights reserved.
#  Strings for the tarantella security certuse command

security_certuse_desc="  certuse       Installs an X.509 certificate"

# Strings for tarantella security certuse

sf_certuse_usage="Usage: tarantella security certuse [ --certfile <cfile> [--keyfile <kfile>] ]
 - Installs an X.509 certificate.
 - Use \"tarantella security certuse --help\" for detailed information."

lf_certuse_usage="
tarantella security certuse

  Installs an X.509 certificate from standard input, saving in
  <install_dir>/var/tsp.

  Use this if you previously used \"tarantella security certrequest\".

tarantella security certuse --certfile <cfile> [--keyfile <kfile>]

  Shares another product's X.509 certificate and private key.

  --certfile <cfile>   Names the file containing the certificate.
                       If --keyfile not specified, assumes <cfile> also
                       contains the key.
  --keyfile <kfile>    Names the file containing the key.

  IMPORTANT: Use these options to share another product's certificate.
  $PRODUCT_SHORT_NAME makes symbolic links to the files, NOT COPIES.

Certificates must be Base 64-encoded PEM-format, with a header line
including \"BEGIN CERTIFICATE\", as used by OpenSSL.

For more information, see the $PRODUCT_SHORT_NAME Administration Guide."

# File <certfile> doesn't contain a valid certificate.
l_invalid_cert_1="File "
l_invalid_cert_2=" doesn't contain a valid certificate,
or is not readable by the user \"ttasys\"."

# Certificate from stdin not valid.
l_invalid_cert_3="Not a valid certificate."

# File <keyfile> doesn't contain a valid private key.
l_invalid_key_1="File "
l_invalid_key_2=" doesn't contain a valid private key,
or is not readable by the user \"ttasys\"."

# --keyfile was specified, but not --certfile
l_keyfile_needs_certfile="If you name a key file, you must also name a certificate file."

# No key file.
l_no_key="No private key is present for this server. You should run 'tarantella
security certrequest' to generate a Certificate Signing Request, then
submit that to a Certificate Authority."

# No kfile, no cfile, but it seems you did a --keyfile before. Bail out!
l_cant_use_linked_key="Your current key was set up with --keyfile. Installing a certificate
in this way will probably break your existing SSL configuration."

# Q&A for overwrite of existing certificate
l_certificate_already_exists="A certificate is already installed for this server."
q_newcert="Are you sure you want to overwrite it?"

l_notinstalled="New certificate was NOT installed."

# Q&A for overwrite of existing key
l_key_already_exists="A key file already exists for this server."
q_newkey="Are you sure you want to overwrite it?"

l_certfile_does_not_exist="The certificate file doesn't exist."
l_keyfile_does_not_exist="The key file doesn't exist."

l_linked_to_certfile="IMPORTANT: Your certificate information HAS NOT BEEN COPIED.
           DO NOT delete or move the certificate information.
"

l_error_copying="Error: couldn't move the certificate into place."

l_cert_installed="Successfully installed certificate."

l_cant_create_tspdir="Error: Unable to create directory for certificate file."

# same private key

l_use_ex_key="Using the currently installed private key."

l_ex_key_comment="
A keyfile has not been supplied, and the certificate does not contain
a valid key."

q_ex_key_q="Do you want to use the currently installed key?"

#
# comments and errors for the certificate and key check.
#

h_ssleay_cert_check="Certificate: Summary"

l_ssleay_check_failure="WARNING: Unable to check that key and certificate are compatible.
Error reported was:"

# error 0
l_ssleay_key_match="Key and certificate are compatible."

# error 1
l_ssleay_bad_options="(ttautility) Incorrect command-line arguments."

# error 2
l_ssleay_no_cert="(ttautility) A certificate file must be specified."

# error 3
l_ssleay_ctx_failure="(ttautility) Unable to construct an SSL context."

# error 4
l_ssleay_bad_cert="(ttautility) Cannot load the certificate file. The file may be corrupt,
or written in an unknown format."

# error 5
l_ssleay_cert_extract="(ttautility) Unable to extract the certificate from the SSL context."

# error 6
l_ssleay_no_key="(ttautility) A key file must be specified to check the certificate/key pair"

# error 7
l_ssleay_key_mismatch="WARNING: The supplied key and certificate do not match."
l_ssleay_wrong_key="The key may belong to another certificate, or could be corrupt."

# error unknown
l_ssleay_unknown="(ttautility) Unknown error code returned."
