From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 9 Sep 2012 20:47:36 +0000 (+0000)
Subject: update README
X-Git-Tag: master-pre-reformat~1649
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=61d24f102d114a001fc8942bcb27620a242ec4c5;p=openssl

update README
---

diff --git a/demos/certs/README b/demos/certs/README
index d022d0afc0..126663a1d8 100644
--- a/demos/certs/README
+++ b/demos/certs/README
@@ -3,7 +3,19 @@ a script. This is often a cause for confusion which can result in incorrect
 CA certificates, obsolete V1 certificates or duplicate serial numbers.
 The range of command line options can be daunting for a beginner.
 
-This is a simple example of how to generate certificates automatically
-using scripts. Example creates a root CA, a server certificate signed by
-the root, an intermediate CA signed by the root and finally a client 
-certificate signed by the intermediate CA.
+The mkcerts.sh script is an example of how to generate certificates
+automatically using scripts. Example creates a root CA, an intermediate CA
+signed by the root and several certificates signed by the intermediate CA.
+
+The script then creates an empty index.txt file and adds entries for the
+certificates and generates a CRL. Then one certificate is revoked and a 
+second CRL generated.
+
+The script ocsprun.sh runs the test responder on port 8888 covering the
+client certificates.
+
+The script ocspquery.sh queries the status of the certificates using the
+test responder.
+
+
+