You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

52 lines
1.9 KiB

From f7027b3118ea90d616d0ddeeb348f15ba91cd08b Mon Sep 17 00:00:00 2001
From: Jan Synacek <jsynacek@redhat.com>
Date: Wed, 13 Nov 2013 13:34:06 +0100
Subject: [PATCH] Fix client manpage
---
doc/man/man5/ldap.conf.5 | 18 ++++++++----------
1 file changed, 8 insertions(+), 10 deletions(-)
diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index 7f5bc64..bef0672 100644
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -431,8 +431,8 @@ The environment variable RANDFILE can also be used to specify the filename.
This parameter is ignored with GnuTLS and Mozilla NSS.
.TP
.B TLS_REQCERT <level>
-Specifies what checks to perform on server certificates in a TLS session,
-if any. The
+Specifies what checks to perform on server certificates in a TLS session.
+The
.B <level>
can be specified as one of the following keywords:
.RS
@@ -441,19 +441,17 @@ can be specified as one of the following keywords:
The client will not request or check any server certificate.
.TP
.B allow
-The server certificate is requested. If no certificate is provided,
-the session proceeds normally. If a bad certificate is provided, it will
+The server certificate is requested. If a bad certificate is provided, it will
be ignored and the session proceeds normally.
.TP
.B try
-The server certificate is requested. If no certificate is provided,
-the session proceeds normally. If a bad certificate is provided,
-the session is immediately terminated.
+The server certificate is requested. If a bad certificate is provided, the
+session is immediately terminated.
.TP
.B demand | hard
-These keywords are equivalent. The server certificate is requested. If no
-certificate is provided, or a bad certificate is provided, the session
-is immediately terminated. This is the default setting.
+These keywords are equivalent and semantically same as
+.BR try .
+This is the default setting.
.RE
.TP
.B TLS_CRLCHECK <level>
--
1.8.3.1