Changeset 809c422 in mod_gnutls for docs/mod_gnutls_manual.mdwn


Ignore:
Timestamp:
Apr 2, 2015, 8:48:19 PM (5 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, jessie-backports, master, proxy-ticket, upstream
Children:
bfcff28
Parents:
bd24203
Message:

TLS proxy: Add support for CRLs to back end server verification

When configured as a TLS proxy, mod_gnutls can now use CRLs to check if
the certificate provided by a back end server is still valid. The CRL
file must be provided externally, the new configuration option
"GnuTLSProxyCRLFile" is used to load it.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • docs/mod_gnutls_manual.mdwn

    rbd24203 r809c422  
    413413--------------------
    414414
    415 Set to the PEM Encoded Certificate Authority Certificate
     415Set to the PEM encoded Certificate Authority Certificate
    416416
    417417    GnuTLSProxyCAFile FILEPATH
     
    420420Context: server config, virtual host
    421421
    422 Takes an absolute or relative path to a PEM Encoded Certificate to use
     422Takes an absolute or relative path to a PEM encoded certificate to use
    423423as a Certificate Authority when verifying certificates provided by
    424424proxy back end servers. This file may contain a list of trusted
     
    426426always fail due to lack of a trusted CA.
    427427
     428`GnuTLSProxyCRLFile`
     429--------------------
     430
     431Set to the PEM encoded Certificate Revocation List
     432
     433    GnuTLSProxyCRLFile FILEPATH
     434
     435Default: *none*\
     436Context: server config, virtual host
     437
     438Takes an absolute or relative path to a PEM encoded Certificate
     439Revocation List to use when verifying certificates provided by proxy
     440back end servers. The file may contain a list of CRLs.
     441
    428442`GnuTLSProxyCertificateFile`
    429443-----------------------
    430444
    431 Set to the PEM Encoded Client Certificate
     445Set to the PEM encoded Client Certificate
    432446
    433447    GnuTLSProxyCertificateFile FILEPATH
     
    436450Context: server config, virtual host
    437451
    438 Takes an absolute or relative path to a PEM-encoded X.509 certificate
     452Takes an absolute or relative path to a PEM encoded X.509 certificate
    439453to use as this Server's End Entity (EE) client certificate for TLS
    440454client authentication in proxy TLS connections. If you need to supply
     
    451465---------------
    452466
    453 Set to the PEM Encoded Private Key
     467Set to the PEM encoded Private Key
    454468
    455469    GnuTLSProxyKeyFile FILEPATH
Note: See TracChangeset for help on using the changeset viewer.