diff options
Diffstat (limited to 'doc/s6-tlsc.html')
| -rw-r--r-- | doc/s6-tlsc.html | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/doc/s6-tlsc.html b/doc/s6-tlsc.html index d40820c..39f4680 100644 --- a/doc/s6-tlsc.html +++ b/doc/s6-tlsc.html @@ -126,10 +126,7 @@ two more environment variables: <tt>KEYFILE</tt> contains the path to a file containing the private key, DER- or PEM-encoded; and <tt>CERTFILE</tt> contains the path to a file containing the client certificate, DER- or -PEM-encoded. Please note that for now, support for client -certificates is experimental, and only works -with the <a href="https://www.libressl.org/">LibreSSL</a> -backend (BearSSL does not support client certificates yet). +PEM-encoded. </p> <p> @@ -229,8 +226,7 @@ and break the connection when <em>prog</em> sends EOF. </li> <li> <tt>-s</tt> : transmit EOF by half-closing the TCP connection without using <tt>close_notify</tt>. This is the default. </li> <li> <tt>-Y</tt> : Do not send a client certificate. This is the default. </li> - <li> <tt>-y</tt> : Send a client certificate. This is experimental and -for now unsupported by BearSSL. </li> + <li> <tt>-y</tt> : Send a client certificate. </li> <li> <tt>-k <em>servername</em></tt> : use Server Name Indication, and send <em>servername</em>. The default is not to use SNI, which may be a security risk. </li> |