Changeset 031acac in mod_gnutls for docs

Timestamp:

Jul 3, 2014, 1:00:29 PM (5 years ago)

Author:

Nikos Mavrogiannopoulos <nmav@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

7314438

Parents:

765cac2

git-author:

Nikos Mavrogiannopoulos <nmav@…> (06/24/14 10:28:03)

git-committer:

Nikos Mavrogiannopoulos <nmav@…> (07/03/14 13:00:29)

Message:

Use the new (3.1.3+) GnuTLS APIs to obtain private keys.

This allows the loading a private key from a PKCS #11 or a TPM URL
(the GnuTLSPIN and GnuTLSSRKPIN variables should be set), and loading
encrypted private keys in PKCS #8, PKCS #12 or openssl format.

File:

• docs/mod_gnutls_manual.mdwn (modified) (1 diff)

docs/mod_gnutls_manual.mdwn

@@ -367 +367 @@
 as protection against statistical attacks to ciphertext data in order to
 achieve maximum compatibility (some broken mobile clients need this).
+
+`GnuTLSPIN`
+------------------
+
+Set the PIN to be used to access encrypted key files or PKCS #11 objects.
+
+    GnuTLSPIN XXXXXX
+
+Default: *none*\
+Context: server config, virtual host
+
+Takes a string to be used as a PIN for the protected objects in
+a security module, or as a key to be used to decrypt PKCS #8, PKCS #12,
+or openssl encrypted keys.
+
+`GnuTLSSRKPIN`
+------------------
+
+Set the SRK PIN to be used to unlaccess the TPM.
+
+    GnuTLSSRKPIN XXXXXX
+
+Default: *none*\
+Context: server config, virtual host
+
+Takes a string to be used as a PIN for the protected objects in
+the TPM module.
 
 `GnuTLSExportCertificates`