upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-30 11:39:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#7744 Fix TLS_REQCERT description

Browse source
This commit is contained in:
Jan Synacek 2013-11-13 13:34:06 +01:00 committed by Howard Chu
parent dfd8515e8e
commit c25fa7b0e5
1 changed files with 7 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
doc/man/man5/ldap.conf.5
View file

@ -399,8 +399,8 @@ The environment variable RANDFILE can also be used to specify the filename.
This parameter is ignored with GnuTLS.
.TP
.B TLS_REQCERT <level>
Specifies what checks to perform on server certificates in a TLS session,
if any. The
Specifies what checks to perform on server certificates in a TLS session.
The
.B <level>
can be specified as one of the following keywords:
.RS
@ -409,19 +409,17 @@ can be specified as one of the following keywords:
The client will not request or check any server certificate.
.TP
.B allow
The server certificate is requested. If no certificate is provided,
the session proceeds normally. If a bad certificate is provided, it will
The server certificate is requested. If a bad certificate is provided, it will
be ignored and the session proceeds normally.
.TP
.B try
The server certificate is requested. If no certificate is provided,
the session proceeds normally. If a bad certificate is provided,
The server certificate is requested. If a bad certificate is provided,
the session is immediately terminated.
.TP
.B demand | hard
These keywords are equivalent. The server certificate is requested. If no
certificate is provided, or a bad certificate is provided, the session
is immediately terminated. This is the default setting.
These keywords are equivalent and the same as
.BR try .
This is the default setting.
.RE
.TP
.B TLS_REQSAN <level>