From 56b27f201728c0fddd607b6c864f694dd319edbb Mon Sep 17 00:00:00 2001
From: "Endi S. Dewata" <edewata@redhat.com>
Date: Mon, 29 Jun 2015 15:09:07 -0400
Subject: [PATCH] Updated pki-cert man page.

The man page for pki-cert has been modified to describe the file
format used to specify the search constraints.

https://fedorahosted.org/pki/ticket/995
---
 base/java-tools/man/man1/pki-cert.1 | 67 +++++++++++++++++++++++++++++++++++++
 1 file changed, 67 insertions(+)

diff --git a/base/java-tools/man/man1/pki-cert.1 b/base/java-tools/man/man1/pki-cert.1
index ad2f5661742314b471b34b6a778396d53de5130b..ffa1fea5d0a29a5b425b1fcaa497e8b831251f7f 100644
--- a/base/java-tools/man/man1/pki-cert.1
+++ b/base/java-tools/man/man1/pki-cert.1
@@ -105,6 +105,73 @@ It is also possible to search for and list specific certificates by adding a sea
 
 .B pki ca-cert-find --issuedOnFrom 2012-06-15
 
+To list certificates with search constraints defined in a file:
+
+.B pki ca-cert-find --input <filename>
+
+where the file is in the following format:
+
+.IP
+.nf
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<CertSearchRequest>
+
+    <serialNumberRangeInUse>true</serialNumberRangeInUse>
+    <serialFrom></serialFrom>
+    <serialTo></serialTo>
+
+    <subjectInUse>false</subjectInUse>
+    <eMail></eMail>
+    <commonName></commonName>
+    <userID></userID>
+    <orgUnit></orgUnit>
+    <org></org>
+    <locality></locality>
+    <state></state>
+    <country></country>
+
+    <matchExactly>false</matchExactly>
+
+    <status></status>
+
+    <revokedByInUse>false</revokedByInUse>
+    <revokedBy></revokedBy>
+
+    <revokedOnFrom>false</revokedOnFrom>
+    <revokedOnTo></revokedOnTo>
+
+    <revocationReasonInUse>false</revocationReasonInUse>
+    <revocationReason></revocationReason>
+
+    <issuedByInUse>false</issuedByInUse>
+    <issuedBy></issuedBy>
+
+    <issuedOnInUse>false</issuedOnInUse>
+    <issuedOnFrom></issuedOnFrom>
+    <issuedOnTo></issuedOnTo>
+
+    <validNotBeforeInUse>false</validNotBeforeInUse>
+    <validNotBeforeFrom></validNotBeforeFrom>
+    <validNotBeforeTo></validNotBeforeTo>
+
+    <validNotAfterInUse>false</validNotAfterInUse>
+    <validNotAfterFrom></validNotAfterFrom>
+    <validNotAfterTo></validNotAfterTo>
+
+    <validityLengthInUse>false</validityLengthInUse>
+    <validityOperation></validityOperation>
+    <validityCount></validityCount>
+    <validityUnit></validityUnit>
+
+    <certTypeInUse>false</certTypeInUse>
+    <certTypeSubEmailCA></certTypeSubEmailCA>
+    <certTypeSubSSLCA></certTypeSubSSLCA>
+    <certTypeSecureEmail></certTypeSecureEmail>
+
+</CertSearchRequest>
+.fi
+
+.PP
 To view a particular certificate:
 
 .B pki ca-cert-show <certificate ID>
-- 
1.9.3