You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
48 lines
1.8 KiB
48 lines
1.8 KiB
Reference default system-wide CA certificates in manpages |
|
|
|
OpenSSL, unless explicitly configured, uses system-wide default set of CA |
|
certificates. |
|
|
|
Author: Matus Honek <mhonek@redhat.com> |
|
|
|
diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5 |
|
--- a/doc/man/man5/ldap.conf.5 |
|
+++ b/doc/man/man5/ldap.conf.5 |
|
@@ -307,6 +307,9 @@ are more options you can specify. These options are used when an |
|
.B ldaps:// URI |
|
is selected (by default or otherwise) or when the application |
|
negotiates TLS by issuing the LDAP StartTLS operation. |
|
+.LP |
|
+When using OpenSSL, if neither \fBTLS_CACERT\fP nor \fBTLS_CACERTDIR\fP |
|
+is set, the system-wide default set of CA certificates is used. |
|
.TP |
|
.B TLS_CACERT <filename> |
|
Specifies the file that contains certificates for all of the Certificate |
|
diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5 |
|
--- a/doc/man/man5/slapd-config.5 |
|
+++ b/doc/man/man5/slapd-config.5 |
|
@@ -801,6 +801,10 @@ If |
|
.B slapd |
|
is built with support for Transport Layer Security, there are more options |
|
you can specify. |
|
+.LP |
|
+When using OpenSSL, if neither \fBolcTLSCACertificateFile\fP nor |
|
+\fBolcTLSCACertificatePath\fP is set, the system-wide default set of CA |
|
+certificates is used. |
|
.TP |
|
.B olcTLSCipherSuite: <cipher-suite-spec> |
|
Permits configuring what ciphers will be accepted and the preference order. |
|
diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5 |
|
--- a/doc/man/man5/slapd.conf.5 |
|
+++ b/doc/man/man5/slapd.conf.5 |
|
@@ -1032,6 +1032,10 @@ If |
|
.B slapd |
|
is built with support for Transport Layer Security, there are more options |
|
you can specify. |
|
+.LP |
|
+When using OpenSSL, if neither \fBTLSCACertificateFile\fP nor |
|
+\fBTLSCACertificatePath\fP is set, the system-wide default set of CA |
|
+certificates is used. |
|
.TP |
|
.B TLSCipherSuite <cipher-suite-spec> |
|
Permits configuring what ciphers will be accepted and the preference order.
|
|
|