rsa(8): recommend secstore(1) for Plan 9 RSA private key storage

[plan9front.git] / sys / man / 8 / rsa

diff --git a/sys/man/8/rsa b/sys/man/8/rsa
index c78d7d74183305564813e7932209d0dff45062c9..5baf185746b4773fe96cafd037563734d12bc3bc 100644 (file)
--- a/sys/man/8/rsa
+++ b/sys/man/8/rsa
@@ -224,6 +224,11 @@ Applications that serve TLS-encrypted sessions (for example,
 and
 .IR tlssrv (8))
 expect certificates in ASN.1/DER/PEM format.
+.PP
+The Plan 9 RSA private key needs to be loaded into factotum
+for TLS server applications. It is recommended to put the key into
+.IR secstore (1),
+avoiding it being stored unencrypted on the filesystem.
 .SH EXAMPLES
 Generate a fresh key and use it to start a TLS-enabled web server:
 .IP