Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
orbea -
OpenLDAP
Commits
c25fa7b0
Commit
c25fa7b0
authored
Nov 13, 2013
by
Jan Synacek
Committed by
Howard Chu
Feb 18, 2021
Browse files
ITS#7744 Fix TLS_REQCERT description
parent
dfd8515e
Changes
1
Hide whitespace changes
Inline
Side-by-side
doc/man/man5/ldap.conf.5
View file @
c25fa7b0
...
...
@@ -399,8 +399,8 @@ The environment variable RANDFILE can also be used to specify the filename.
This parameter is ignored with GnuTLS.
.TP
.B TLS_REQCERT <level>
Specifies what checks to perform on server certificates in a TLS session
,
if any.
The
Specifies what checks to perform on server certificates in a TLS session
.
The
.B <level>
can be specified as one of the following keywords:
.RS
...
...
@@ -409,19 +409,17 @@ can be specified as one of the following keywords:
The client will not request or check any server certificate.
.TP
.B allow
The server certificate is requested. If no certificate is provided,
the session proceeds normally. If a bad certificate is provided, it will
The server certificate is requested. If a bad certificate is provided, it will
be ignored and the session proceeds normally.
.TP
.B try
The server certificate is requested. If no certificate is provided,
the session proceeds normally. If a bad certificate is provided,
The server certificate is requested. If a bad certificate is provided,
the session is immediately terminated.
.TP
.B demand | hard
These keywords are equivalent
. The server certificate is requested. If no
certificate is provided, or a bad certificate is provided, the session
is immediately terminated.
This is the default setting.
These keywords are equivalent
and the same as
.BR try .
This is the default setting.
.RE
.TP
.B TLS_REQSAN <level>
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment