Changeset adcd021 in mod_gnutls

Timestamp:

Jan 13, 2020, 1:08:40 PM (11 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

master, proxy-ticket

Children:

cc748329

Parents:

546bf35

Message:

Small documentation updates

File:

• doc/mod_gnutls_manual.md (modified) (2 diffs)

doc/mod_gnutls_manual.md

@@ -232 +232 @@
 Context: server config, virtual host
 
-By default, `mod_gnutls` uses the DH parameters included with GnuTLS
-corresponding to the security level of the configured private keys if
-compiled with GnuTLS 3.5.6 or newer, and the ffdhe2048 DH group as
-defined in RFC 7919, Appendix A.1 otherwise.
+By default `mod_gnutls` uses the DH parameters included with GnuTLS
+corresponding to the security level of the configured private keys.
 
 If you need to use different DH parameters, you can provide a PEM file
@@ -341 +339 @@
 certificate, and optionally those of the issuing Certificate
 Authorities (CAs). If the file contains multiple certificates they
-must be ordered from EE to the CA closest to the root CA (or the root
-CA itself).
-
-Including at least the immediately issuing CA is highly recommended
-because it is required for OCSP stapling.
+must be ordered from EE to the CA closest to the root CA.
+
+Including the full certificate chain is highly recommended because the
+CA certificates are needed for [OCSP stapling](#ocsp-stapling-configuration).
 
 Since version 0.7 this can be a PKCS #11 URL instead of a file.