From 73950e8fb1575ae4cb360ac82d8b3e876ce012d9 Mon Sep 17 00:00:00 2001 From: Jon Benson Date: Mon, 17 Apr 2017 19:35:04 -0700 Subject: [PATCH 1/2] Fix sentence - remove "and" --- website/source/docs/secrets/pki/index.html.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/source/docs/secrets/pki/index.html.md b/website/source/docs/secrets/pki/index.html.md index cc37d93bc..7f873a412 100644 --- a/website/source/docs/secrets/pki/index.html.md +++ b/website/source/docs/secrets/pki/index.html.md @@ -66,7 +66,7 @@ This also provides a convenient method of switching to a new CA certificate while keeping CRLs valid from the old CA certificate; simply mount a new backend and issue from there. -A common pattern is to have one mount act as your root CA, and which is only +A common pattern is to have one mount act as your root CA, which is only used for signing intermediate CA CSRs mounted at other locations. ### Keep certificate lifetimes short, for CRL's sake From 563ad2175f9ef3eb12c98db2e2f4e6591de3976b Mon Sep 17 00:00:00 2001 From: Jeff Mitchell Date: Tue, 18 Apr 2017 15:50:44 -0400 Subject: [PATCH 2/2] Update index.html.md --- website/source/docs/secrets/pki/index.html.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/website/source/docs/secrets/pki/index.html.md b/website/source/docs/secrets/pki/index.html.md index 7f873a412..62e0ef184 100644 --- a/website/source/docs/secrets/pki/index.html.md +++ b/website/source/docs/secrets/pki/index.html.md @@ -66,8 +66,8 @@ This also provides a convenient method of switching to a new CA certificate while keeping CRLs valid from the old CA certificate; simply mount a new backend and issue from there. -A common pattern is to have one mount act as your root CA, which is only -used for signing intermediate CA CSRs mounted at other locations. +A common pattern is to have one mount act as your root CA and to use this CA +only to sign intermediate CA CSRs from other PKI mounts. ### Keep certificate lifetimes short, for CRL's sake