[rt-commit] r135 - /redwax-tool/trunk/redwax-tool.c

[rt-commit at redwax.eu]

Author: minfrin at redwax.eu
Date: Tue Sep 27 12:37:26 2022
New Revision: 135

Log:
Polish the docs.

Modified:
    redwax-tool/trunk/redwax-tool.c

Modified: redwax-tool/trunk/redwax-tool.c
==============================================================================
--- redwax-tool/trunk/redwax-tool.c	(original)
+++ redwax-tool/trunk/redwax-tool.c	Tue Sep 27 12:37:26 2022
@@ -282,8 +282,8 @@
     { "format-out", REDWAX_TOOL_FORMAT_OUT, 1, "  --format-out=xml|json|yaml\tFormat of output metadata." },
     { "user-in", REDWAX_TOOL_USER_IN, 1, "  --user-in=user\t\tUse the privileges of this user when reading\n\t\t\t\tcertificates and keys." },
     { "user-out", REDWAX_TOOL_USER_OUT, 1, "  --user-out=user\t\tUse the privileges of this user when writing\n\t\t\t\tcertificates and keys." },
-    { "group-in", REDWAX_TOOL_GROUP_IN, 1, "  --group-in=group\t\tUse the privileges of this group when reading\n\t\t\t\tcertificates and keys." },
-    { "group-out", REDWAX_TOOL_GROUP_OUT, 1, "  --group-out=group\t\tUse the privileges of this group when writing\n\t\t\t\tcertificates and keys." },
+    { "group-in", REDWAX_TOOL_GROUP_IN, 1, "  --group-in=group\t\tUse the privileges of this group when reading\n\t\t\t\tcertificates and keys. If you have set a user\n\t\t\t\tbefore setting a group, you may no longer have permission to set the group. It is recommended that if user and group are set, the group is set first." },
+    { "group-out", REDWAX_TOOL_GROUP_OUT, 1, "  --group-out=group\t\tUse the privileges of this group when writing\n\t\t\t\tcertificates and keys. If you have set a user\n\t\t\t\tbefore setting a group, you may no longer have permission to set the group. It is recommended that if user and group are set, the group is set first." },
 #if 0
     { "jwks-out", REDWAX_TOOL_JWKS_OUT, 1, "  --jwks-out=file\t\tWrite keys to the given file as an RFC7517 JSON\n\t\t\t\tWeb Key Set." },
     { "ssh-private-out", REDWAX_TOOL_SSH_PRIVATE_OUT, 1, "  --ssh-private-out=file\t\tWrite an SSH private key to the given file." },
@@ -321,6 +321,9 @@
             "DESCRIPTION\n"
             "  The redwax tool allows certificates and keys in a range of formats to\n"
             "  be read and converted into other formats as needed by common services.\n"
+            "\n"
+            "  Options are read in order in three phases. All input options are read,\n"
+    		"  then all filter options, and then all output options.\n"
             "\n"
             "OPTIONS\n", msg ? msg : "", n, n);