From 6780eee3e0dbe37640f72ed1e37a95c506e23f8c Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Tue, 18 May 2021 11:19:19 +0000 Subject: Prepare for 2.4.2.0; implement client certificates with bearssl Also send a bit more environment with libtls --- doc/s6-tlsd-io.html | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'doc/s6-tlsd-io.html') diff --git a/doc/s6-tlsd-io.html b/doc/s6-tlsd-io.html index 807c982..29f75c3 100644 --- a/doc/s6-tlsd-io.html +++ b/doc/s6-tlsd-io.html @@ -188,8 +188,10 @@ no effect. and break the connection when receiving a local EOF.
  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
    • -
  • -Y : Do not send a client certificate. This is the default.
    • -
  • -y : Send a client certificate.
    • +
  • -Y : Require an optional client certificate.
    • +
  • -y : Require a mandatory client certificate. +The default, with neither the -Y nor the -y option, +is not to require a client certificate at all.
  • -K kimeout : if the peer fails to send data for kimeout milliseconds during the handshake, close the connection. The default is 0, which means infinite timeout -- cgit v1.2.3