Changeset 809c422 in mod_gnutls for docs

Timestamp:

Apr 2, 2015, 8:48:19 PM (8 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, proxy-ticket, upstream

Children:

bfcff28

Parents:

bd24203

Message:

TLS proxy: Add support for CRLs to back end server verification

When configured as a TLS proxy, mod_gnutls can now use CRLs to check if
the certificate provided by a back end server is still valid. The CRL
file must be provided externally, the new configuration option
"GnuTLSProxyCRLFile" is used to load it.

File:

• docs/mod_gnutls_manual.mdwn (modified) (5 diffs)

docs/mod_gnutls_manual.mdwn

@@ -413 +413 @@
 --------------------
 
-Set to the PEM Encoded Certificate Authority Certificate
+Set to the PEM encoded Certificate Authority Certificate
 
     GnuTLSProxyCAFile FILEPATH
@@ -420 +420 @@
 Context: server config, virtual host
 
-Takes an absolute or relative path to a PEM Encoded Certificate to use
+Takes an absolute or relative path to a PEM encoded certificate to use
 as a Certificate Authority when verifying certificates provided by
 proxy back end servers. This file may contain a list of trusted
@@ -426 +426 @@
 always fail due to lack of a trusted CA.
 
+`GnuTLSProxyCRLFile`
+--------------------
+
+Set to the PEM encoded Certificate Revocation List
+
+    GnuTLSProxyCRLFile FILEPATH
+
+Default: *none*\
+Context: server config, virtual host
+
+Takes an absolute or relative path to a PEM encoded Certificate
+Revocation List to use when verifying certificates provided by proxy
+back end servers. The file may contain a list of CRLs.
+
 `GnuTLSProxyCertificateFile`
 -----------------------
 
-Set to the PEM Encoded Client Certificate
+Set to the PEM encoded Client Certificate
 
     GnuTLSProxyCertificateFile FILEPATH
@@ -436 +450 @@
 Context: server config, virtual host
 
-Takes an absolute or relative path to a PEM-encoded X.509 certificate
+Takes an absolute or relative path to a PEM encoded X.509 certificate
 to use as this Server's End Entity (EE) client certificate for TLS
 client authentication in proxy TLS connections. If you need to supply
@@ -451 +465 @@
 ---------------
 
-Set to the PEM Encoded Private Key
+Set to the PEM encoded Private Key
 
     GnuTLSProxyKeyFile FILEPATH