Introduce networkingPrivate.getCertificateLists

components/onc/docs/onc_spec.md

Index: components/onc/docs/onc_spec.md
diff --git a/components/onc/docs/onc_spec.md b/components/onc/docs/onc_spec.md
index 17f90e4f60e1bd042df4d7cd20397aad03a74a6b..99a9ecbeb30981c69bccf2bf4010b47f29d88640 100644
--- a/components/onc/docs/onc_spec.md
+++ b/components/onc/docs/onc_spec.md
@@ -1042,9 +1042,19 @@ type exists to configure the authentication.
     * (required if **ClientCertType** is *Ref*, otherwise ignored) - **string**
     * Reference to client certificate stored in certificate section.
 
+* **ClientCertPKCS11Id**
+    * (required if **ClientCertType** is *PKCS11Id*, otherwise ignored) - 
+    * PKCS#11 identifier in the format slot:key_id.
+  
 * **ClientCertType**
-    * (optional) **string**
-    `Allowed values are` *Ref*, and *Pattern*.
+    * (optional) - **string**
+    * `Allowed values are` *Ref*, *Pattern*, *PKCS11Id* and *None*.
+    * *Ref* and *Pattern* indicate that the associated property should be used
+      to identify the client certificate.
+    * *PKCS11Id* is used when representing a certificate in a local store and is
+      only valid when describing a local configuraiton.

[tbarzic, 2017/05/17 22:35:57]

typo: configuration

[stevenjb, 2017/05/18 16:30:57]

Done.

+    * *None* indicates that the server is configured to not require client
+      certificates.
 
 * **Identity**
     * (optional) - **string**