FPS "%-20s Cert & Key database prefix\n", "   -P dbprefix");
static void LongUsage(char *progName){    FPS "%-15s Add a certificate to the database        (create if needed)\n",	"-A");    FPS "%-15s Add an Email certificate to the database (create if needed)\n",	"-E");    FPS "%-20s Specify the nickname of the certificate to add\n",	"   -n cert-name");    FPS "%-20s Set the certificate trust attributes:\n",	"   -t trustargs");    FPS "%-25s p \t valid peer\n", "");    FPS "%-25s P \t trusted peer (implies p)\n", "");    FPS "%-25s c \t valid CA\n", "");    FPS "%-25s T \t trusted CA to issue client certs (implies c)\n", "");    FPS "%-25s C \t trusted CA to issue server certs (implies c)\n", "");    FPS "%-25s u \t user cert\n", "");    FPS "%-25s w \t send warning\n", "");#ifdef DEBUG_NSSTEAM_ONLY    FPS "%-25s g \t make step-up cert\n", "");#endif /* DEBUG_NSSTEAM_ONLY */    FPS "%-20s Specify the password file\n",	"   -f pwfile");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "%-20s The input certificate is encoded in ASCII (RFC1113)\n",	"   -a");    FPS "%-20s Specify the certificate file (default is stdin)\n",	"   -i input");    FPS "\n");    FPS "%-15s Create a new binary certificate from a BINARY cert request\n",	"-C");    FPS "%-20s The nickname of the issuer cert\n",	"   -c issuer-name");    FPS "%-20s The BINARY certificate request file\n",	"   -i cert-request ");    FPS "%-20s Output binary cert to this file (default is stdout)\n",	"   -o output-cert");    FPS "%-20s Self sign\n",	"   -x");    FPS "%-20s Cert serial number\n",	"   -m serial-number");    FPS "%-20s Time Warp\n",	"   -w warp-months");    FPS "%-20s Months valid (default is 3)\n",        "   -v months-valid");    FPS "%-20s Specify the password file\n",	"   -f pwfile");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "%-20s Create key usage extension\n",	"   -1 ");    FPS "%-20s Create basic constraint extension\n",	"   -2 ");    FPS "%-20s Create authority key ID extension\n",	"   -3 ");    FPS "%-20s Create crl distribution point extension\n",	"   -4 ");    FPS "%-20s Create netscape cert type extension\n",	"   -5 ");    FPS "%-20s Create extended key usage extension\n",	"   -6 ");    FPS "\n");    FPS "%-15s Generate a new key pair\n",	"-G");    FPS "%-20s Name of token in which to generate key (default is internal)\n",	"   -h token-name");    FPS "%-20s Type of key pair to generate (\"dsa\", \"rsa\" (default))\n",	"   -k key-type");    FPS "%-20s Key size in bits, (min %d, max %d, default %d)\n",	"   -g key-size", MIN_KEY_BITS, MAX_KEY_BITS, DEFAULT_KEY_BITS);    FPS "%-20s Set the public exponent value (3, 17, 65537) (rsa only)\n",	"   -y exp");    FPS "%-20s Specify the password file\n",        "   -f password-file");    FPS "%-20s Specify the noise file to be used\n",	"   -z noisefile");    FPS "%-20s read PQG value from pqgfile (dsa only)\n",	"   -q pqgfile");    FPS "%-20s Key database directory (default is ~/.netscape)\n",	"   -d keydir");    FPS "\n");    FPS "%-15s Delete a certificate from the database\n",	"-D");    FPS "%-20s The nickname of the cert to delete\n",	"   -n cert-name");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "\n");    FPS "%-15s List all modules\n", /*, or print out a single named module\n",*/        "-U");    FPS "%-20s Module database directory (default is '~/.netscape')\n",        "   -d moddir");    FPS "%-15s List all keys\n", /*, or print out a single named key\n",*/        "-K");    FPS "%-20s Name of token in which to look for keys (default is internal,"	" use \"all\" to list keys on all tokens)\n",	"   -h token-name ");    FPS "%-20s Type of key pair to list (\"all\", \"dsa\", \"rsa\" (default))\n",	"   -k key-type");    FPS "%-20s Specify the password file\n",        "   -f password-file");    FPS "%-20s Key database directory (default is ~/.netscape)\n",	"   -d keydir");    FPS "\n");    FPS "%-15s List all certs, or print out a single named cert\n",	"-L");    FPS "%-20s Pretty print named cert (list all if unspecified)\n",	"   -n cert-name");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "%-20s For single cert, print binary DER encoding\n",	"   -r");    FPS "%-20s For single cert, print ASCII encoding (RFC1113)\n",	"   -a");    FPS "\n");    FPS "%-15s Modify trust attributes of certificate\n",	"-M");    FPS "%-20s The nickname of the cert to modify\n",	"   -n cert-name");    FPS "%-20s Set the certificate trust attributes (see -A above)\n",	"   -t trustargs");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "\n");    FPS "%-15s Create a new certificate database\n",	"-N");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "\n");    FPS "%-15s Generate a certificate request (stdout)\n",	"-R");    FPS "%-20s Specify the subject name (using RFC1485)\n",	"   -s subject");    FPS "%-20s Output the cert request to this file\n",	"   -o output-req");    FPS "%-20s Type of key pair to generate (\"dsa\", \"rsa\" (default))\n",	"   -k key-type");    FPS "%-20s Name of token in which to generate key (default is internal)\n",	"   -h token-name");    FPS "%-20s Key size in bits, RSA keys only (min %d, max %d, default %d)\n",	"   -g key-size", MIN_KEY_BITS, MAX_KEY_BITS, DEFAULT_KEY_BITS);    FPS "%-20s Specify the password file\n",	"   -f pwfile");    FPS "%-20s Key database directory (default is ~/.netscape)\n",	"   -d keydir");    FPS "%-20s Specify the contact phone number (\"123-456-7890\")\n",	"   -p phone");    FPS "%-20s Output the cert request in ASCII (RFC1113); default is binary\n",	"   -a");    FPS "\n");    FPS "%-15s Validate a certificate\n",	"-V");    FPS "%-20s The nickname of the cert to Validate\n",	"   -n cert-name");    FPS "%-20s validity time (\"YYMMDDHHMMSS[+HHMM|-HHMM|Z]\")\n",	"   -b time");    FPS "%-20s Check certificate signature \n",	"   -e ");       FPS "%-20s Specify certificate usage:\n", "   -u certusage");    FPS "%-25s C \t SSL Client\n", "");    FPS "%-25s V \t SSL Server\n", "");    FPS "%-25s S \t Email signer\n", "");    FPS "%-25s R \t Email Recipient\n", "");       FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "\n");    FPS "%-15s Make a certificate and add to database\n",        "-S");    FPS "%-20s Specify the nickname of the cert\n",        "   -n key-name");    FPS "%-20s Specify the subject name (using RFC1485)\n",        "   -s subject");    FPS "%-20s The nickname of the issuer cert\n",	"   -c issuer-name");    FPS "%-20s Set the certificate trust attributes (see -A above)\n",	"   -t trustargs");    FPS "%-20s Type of key pair to generate (\"dsa\", \"rsa\" (default))\n",	"   -k key-type");    FPS "%-20s Name of token in which to generate key (default is internal)\n",	"   -h token-name");    FPS "%-20s Key size in bits, RSA keys only (min %d, max %d, default %d)\n",	"   -g key-size", MIN_KEY_BITS, MAX_KEY_BITS, DEFAULT_KEY_BITS);    FPS "%-20s Self sign\n",	"   -x");    FPS "%-20s Cert serial number\n",	"   -m serial-number");    FPS "%-20s Time Warp\n",	"   -w warp-months");    FPS "%-20s Months valid (default is 3)\n",        "   -v months-valid");    FPS "%-20s Specify the password file\n",	"   -f pwfile");    FPS "%-20s Cert database directory (default is ~/.netscape)\n",	"   -d certdir");    FPS "%-20s Specify the contact phone number (\"123-456-7890\")\n",	"   -p phone");    FPS "%-20s Create key usage extension\n",	"   -1 ");    FPS "%-20s Create basic constraint extension\n",	"   -2 ");    FPS "%-20s Create authority key ID extension\n",	"   -3 ");    FPS "%-20s Create crl distribution point extension\n",	"   -4 ");    FPS "%-20s Create netscape cert type extension\n",	"   -5 ");    FPS "%-20s Create extended key usage extension\n",	"   -6 ");    FPS "\n");    exit(-1);#undef FPS}