Explain how to delete a secret X.509 key.

3 files changed, 13 insertions, 2 deletions

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 2b2c564c5..0d7a6331b 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -1,3 +1,8 @@
+2008-10-13  Werner Koch  <[email protected]>
+
+	* gpgsm.texi (Certificate Management): Explain hot to delete the
+	secret key.
+
 2008-10-01  Werner Koch  <[email protected]>
 
 	* tools.texi (Controlling gpg-connect-agent): Describe /datafile.
diff --git a/doc/gpgsm.texi b/doc/gpgsm.texi
index 9e23ffcb8..d633ec30c 100644
--- a/doc/gpgsm.texi
+++ b/doc/gpgsm.texi
@@ -224,7 +224,13 @@ checked right before it is used.
 
 @item --delete-keys @var{pattern}
 @opindex delete-keys
-Delete the keys matching @var{pattern}.
+Delete the keys matching @var{pattern}.  Note that there is no command
+to delete the secret part of the key directly.  In case you need to do
+this, you should run the command @code{gpg --dump-secret-keys KEYID}
+before you delete the key, copy the string of hex-digits in the
+``keygrip'' line and delete the file consisting of these hex-digits
+and the suffix @code{.key} from the @file{private-keys-v1.d} directory
+below our GnuPG home directory (usually @file{~/.gnupg}).
 
 @item --export [@var{pattern}]
 @opindex export
diff --git a/doc/tools.texi b/doc/tools.texi
index 10cd86140..fdbabcd4c 100644
--- a/doc/tools.texi
+++ b/doc/tools.texi
@@ -1312,7 +1312,7 @@ Close the file descriptor @var{fd}.  Warning: This command is
 experimental and might change in future versions.
 
 @item /showopen
-Show a listy of open files.
+Show a list of open files.
 
 @item /serverpid
 Send the Assuan command @command{GETINFO pid} to the server and store