Description of parameters (via --help option) for the "ca importcertdir" command looks to be awfully incorrect. I can identify at least the following suspicious descriptions:
In particular, for these entries the help text is as follows:
--caname <CA_NAME> (Switch is not required)
If no caname is given, CRLs will be created for all the CAs where it is
-f <FILE_NAME> (Switch is not required)
Use if you are importing an initial administration CA, and this will be the
first CA in your system. Only used during installation when there is no local
AdminCA on the EJBCA instance, but an external CA is used for administration.
Use DER encoding. Default is PEM encoding.
Now, granted, perhaps the above options actually do what they state, but in that case this would be a terrible usability bug.
I've set the priority to critical since if this bug is valid and someone wants to import an existing CA they will be super confused.