989558 - Fix certutil -g keysize description maximum key size

Status: RESOLVED FIXED

(NSS :: Documentation, defect, P2)

Description

[Elio Maldonado]

The certutil option description for -g keysize states the maximum is 8192 bits
which is wrong. It has been 16384 for quite some time. 

Additionally, the example for trust arguments has "TCu,Cu,Tuw", the spurious w should be removed.

Comment 1

[Elio Maldonado]

Attachment: fix maximum key size and drop spurious w

Comment 2

[Robert Relyea]

Comment on attachment 8398849 [details] [diff] [review]
fix maximum key size and drop spurious w

r+

Two comments however:  

1) the maximum and minimum key sizes are dictated by certutil itself, but to the version of softoken it uses. If you are generating a key in a different token, the restrictions of keysize would be different (some tokens only support discrete sizes like 1024 and 2048). It's a subtle difference for a seldom used usecase for certutil, so I'm not asking for a change.

2) It's to bad there isn't an easy way to suck this information from the source, but, alas, we can't include a freebl header in a middle of an xml file;). Give the ideal isn't possible, the current change is fine.

bob

Comment 3

[Elio Maldonado]

Pushed: https://hg.mozilla.org/projects/nss/rev/a21ba103a869