Blame SOURCES/gnutls-3.6.16-doc-p11tool-ckaid.patch

c8a18e
--- gnutls-3.7.2/doc/manpages/p11tool.1	2021-05-29 10:15:22.000000000 +0200
c8a18e
+++ gnutls-3.7.2-bootstrapped/doc/manpages/p11tool.1	2021-06-28 09:35:23.000000000 +0200
c8a18e
@@ -230,8 +230,9 @@
c8a18e
 .NOP \f\*[B-Font]\-\-write\f[]
c8a18e
 Writes the loaded objects to a PKCS #11 token.
c8a18e
 .sp
c8a18e
-It can be used to write private, public keys, certificates or secret keys to a token. Must be combined with
c8a18e
-    one of \--load-privkey, \--load-pubkey, \--load-certificate option.
c8a18e
+It can be used to write private, public keys, certificates or secret keys to a token. Must be combined with one of \--load-privkey, \--load-pubkey, \--load-certificate option.
c8a18e
+.sp
c8a18e
+When writing a certificate object, its CKA_ID is set to the same CKA_ID of the corresponding public key, if it exists on the token; otherwise it will be derived from the X.509 Subject Key Identifier of the certificate. If this behavior is undesired, write the public key to the token beforehand.
c8a18e
 .TP
c8a18e
 .NOP \f\*[B-Font]\-\-delete\f[]
c8a18e
 Deletes the objects matching the given PKCS #11 URL.