diff options
Diffstat (limited to 'doc/s6-tlsd-io.html')
| -rw-r--r-- | doc/s6-tlsd-io.html | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/doc/s6-tlsd-io.html b/doc/s6-tlsd-io.html index f21d487..a026664 100644 --- a/doc/s6-tlsd-io.html +++ b/doc/s6-tlsd-io.html @@ -210,10 +210,14 @@ no effect. </li> and break the connection when receiving a local EOF. </li> <li> <tt>-s</tt> : transmit EOF by half-closing the TCP connection without using <tt>close_notify</tt>. This is the default. </li> - <li> <tt>-Y</tt> : Require an optional client certificate. </li> - <li> <tt>-y</tt> : Require a mandatory client certificate. + <li> <tt>-Y</tt> : Request an client certificate. +The certificate is optional: if the client gives none, the connection +proceeds. </li> + <li> <tt>-y</tt> : Request a client certificate. +The certificate is mandatory: if the client gives none, the handshake +fails. The default, with neither the <tt>-Y</tt> nor the <tt>-y</tt> option, -is not to require a client certificate at all. </li> +is not to request a client certificate at all. </li> <li> <tt>-K <em>kimeout</em></tt> : if the peer fails to send data for <em>kimeout</em> milliseconds during the handshake, close the connection. The default is 0, which means infinite timeout |