From ebb50dc335bcbd563b4e7f4f2083f2af484a893a Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Thu, 4 Feb 2021 10:37:39 +0000 Subject: Doc fixes, thanks flexibeast --- doc/s6-tlsserver.html | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) (limited to 'doc/s6-tlsserver.html') diff --git a/doc/s6-tlsserver.html b/doc/s6-tlsserver.html index 04d9951..12de659 100644 --- a/doc/s6-tlsserver.html +++ b/doc/s6-tlsserver.html @@ -40,7 +40,7 @@ involving: listens to TCP connections on IP address ip port port and forks a command line for every connection. Note that s6-tcpserver also rewrites -itself into a more complex commnd line (the final long-lived +itself into a more complex command line (the final long-lived process being s6-tcpserver4d or s6-tcpserver6d), so your end command line may look a lot longer in ps @@ -49,7 +49,7 @@ than what you originally wrote. This is normal and healthy. which performs TCP access control and various operations on the TCP connection.
  • s6-tlsd, which establishes -a TLS transport (server-side) over a connection, via a +a TLS transport (server-side) over a connection, via an s6-tlsd-io child process.
  • (if applicable) s6-applyuidgid, @@ -63,7 +63,7 @@ same pid as s6-tlsd.
  • prog is expected to read from its peer on its standard input and write to its peer on its standard output. -Since there will be a s6-tlsd-io +Since there will be an s6-tlsd-io program between prog and the network to perform the SSL encryption/decryption, those descriptors will not be a network socket - they will be pipes. @@ -193,7 +193,6 @@ given but no -i or -x option.

  • -Z, -z
  • -S, -s
  • -Y, -y
  • -
  • -k servername
  • -K kimeout
  • @@ -220,7 +219,7 @@ This will start a server listening to 1.2.3.4 on TCP port 443, reading queries on stdin and replying on stdout, as user www, with a TLS layer protecting the connection, the TLS engine running as user nobody (65534:65534). The server is -authentified by the certificate in /etc/ssl/public/mycert.pem +authenticated by the certificate in /etc/ssl/public/mycert.pem that it sends to the client, and the private key in /etc/ssl/private/mykey.der that it keeps to itself.

    -- cgit v1.2.3