From da13dfcb1f0cfae82f448873c15cb01fd78639aa Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Tue, 23 Aug 2022 14:57:07 +0000 Subject: Do not require optional certificates XD Signed-off-by: Laurent Bercot --- doc/s6-tlsd-io.html | 10 +++++++--- doc/s6-tlsd.html | 6 +++--- doc/s6-ucspitlsd.html | 6 +++--- 3 files changed, 13 insertions(+), 9 deletions(-) diff --git a/doc/s6-tlsd-io.html b/doc/s6-tlsd-io.html index f21d487..a026664 100644 --- a/doc/s6-tlsd-io.html +++ b/doc/s6-tlsd-io.html @@ -210,10 +210,14 @@ no effect. and break the connection when receiving a local EOF.
  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
    • -
  • -Y : Require an optional client certificate.
    • -
  • -y : Require a mandatory client certificate. +
  • -Y : Request an client certificate. +The certificate is optional: if the client gives none, the connection +proceeds.
    • +
  • -y : Request a client certificate. +The certificate is mandatory: if the client gives none, the handshake +fails. The default, with neither the -Y nor the -y option, -is not to require a client certificate at all.
    • +is not to request a client certificate at all.
  • -K kimeout : if the peer fails to send data for kimeout milliseconds during the handshake, close the connection. The default is 0, which means infinite timeout diff --git a/doc/s6-tlsd.html b/doc/s6-tlsd.html index c1c6a59..cbaa5c8 100644 --- a/doc/s6-tlsd.html +++ b/doc/s6-tlsd.html @@ -140,10 +140,10 @@ before execing prog.... This is the default.
    • and break the connection when prog sends EOF.
  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
    • -
  • -Y : Require an optional client certificate.
    • -
  • -y : Require a mandatory client certificate. +
  • -Y : Request an optional client certificate.
    • +
  • -y : Request a mandatory client certificate. The default, with neither the -Y nor the -y option, -is not to require a client certificate at all.
    • +is not to request a client certificate at all.
  • -K kimeout : if the peer fails to send data for kimeout milliseconds during the handshake, close the connection. The default is 0, which means infinite timeout diff --git a/doc/s6-ucspitlsd.html b/doc/s6-ucspitlsd.html index cb53389..8488942 100644 --- a/doc/s6-ucspitlsd.html +++ b/doc/s6-ucspitlsd.html @@ -146,10 +146,10 @@ before execing prog.... This is the default.
    • and break the connection when prog sends EOF.
  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
    • -
  • -Y : Require an optional client certificate.
    • -
  • -y : Require a mandatory client certificate. +
  • -Y : Request an optional client certificate.
    • +
  • -y : Request a mandatory client certificate. The default, with neither the -Y nor the -y option, -is not to require a client certificate at all.
    • +is not to request a client certificate at all.
  • -K kimeout : close the connection if the handshake takes more than kimeout milliseconds to complete. The default is 0, which means infinite timeout: let the handshake complete -- cgit v1.2.3