1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY VERSION "1.0">
5
4
<!ENTITY CONFNAME "mandos.conf">
6
5
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
7
<!ENTITY TIMESTAMP "2008-08-31">
6
<!ENTITY TIMESTAMP "2023-04-30">
7
<!ENTITY % common SYSTEM "common.ent">
10
11
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
12
13
<title>Mandos Manual</title>
13
14
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
14
15
<productname>Mandos</productname>
15
<productnumber>&VERSION;</productnumber>
16
<productnumber>&version;</productnumber>
16
17
<date>&TIMESTAMP;</date>
19
20
<firstname>Björn</firstname>
20
21
<surname>Påhlsson</surname>
22
<email>belorn@fukt.bsnet.se</email>
23
<email>belorn@recompile.se</email>
26
27
<firstname>Teddy</firstname>
27
28
<surname>Hogeborn</surname>
29
<email>teddy@fukt.bsnet.se</email>
30
<email>teddy@recompile.se</email>
35
47
<holder>Teddy Hogeborn</holder>
36
48
<holder>Björn Påhlsson</holder>
38
50
<xi:include href="legalnotice.xml"/>
42
54
<refentrytitle>&CONFNAME;</refentrytitle>
43
55
<manvolnum>5</manvolnum>
49
61
Configuration file for the Mandos server
54
66
<synopsis>&CONFPATH;</synopsis>
57
69
<refsect1 id="description">
58
70
<title>DESCRIPTION</title>
60
The file &CONFPATH; is a simple configuration file for
72
The file &CONFPATH; is a configuration file for
61
73
<citerefentry><refentrytitle>mandos</refentrytitle>
62
74
<manvolnum>8</manvolnum></citerefentry>, and is read by it at
63
75
startup. The configuration file starts with <quote><literal
145
<term><option>use_dbus<literal> = </literal>{ <literal
146
>1</literal> | <literal>yes</literal> | <literal
147
>true</literal> | <literal>on</literal> | <literal
148
>0</literal> | <literal>no</literal> | <literal
149
>false</literal> | <literal>off</literal> }</option></term>
151
<xi:include href="mandos-options.xml" xpointer="dbus"/>
156
<term><option>use_ipv6<literal> = </literal>{ <literal
157
>1</literal> | <literal>yes</literal> | <literal
158
>true</literal> | <literal>on</literal> | <literal
159
>0</literal> | <literal>no</literal> | <literal
160
>false</literal> | <literal>off</literal> }</option></term>
162
<xi:include href="mandos-options.xml" xpointer="ipv6"/>
167
<term><option>restore<literal> = </literal>{ <literal
168
>1</literal> | <literal>yes</literal> | <literal
169
>true</literal> | <literal>on</literal> | <literal
170
>0</literal> | <literal>no</literal> | <literal
171
>false</literal> | <literal>off</literal> }</option></term>
173
<xi:include href="mandos-options.xml" xpointer="restore"/>
178
<term><option>statedir<literal> = </literal><replaceable
179
>DIRECTORY</replaceable></option></term>
181
<xi:include href="mandos-options.xml" xpointer="statedir"/>
186
<term><option>socket<literal> = </literal><replaceable
187
>NUMBER</replaceable></option></term>
189
<xi:include href="mandos-options.xml" xpointer="socket"/>
167
229
# A configuration example
169
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
231
address = fe80::aede:48ff:fe71:f6f2
172
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
234
priority = SECURE128:!CTYPE-X.509:+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3:%PROFILE_ULTRA
173
235
servicename = Daena
239
statedir = /var/lib/mandos
174
240
</programlisting>
175
241
</informalexample>
178
244
<refsect1 id="see_also">
179
245
<title>SEE ALSO</title>
247
<citerefentry><refentrytitle>intro</refentrytitle>
248
<manvolnum>8mandos</manvolnum></citerefentry>,
181
249
<citerefentry><refentrytitle>gnutls_priority_init</refentrytitle
182
250
><manvolnum>3</manvolnum></citerefentry>,
183
251
<citerefentry><refentrytitle>mandos</refentrytitle>
212
280
The clients use IPv6 link-local addresses, which are
213
281
immediately usable since a link-local addresses is
214
automatically assigned to a network interfaces when it
282
automatically assigned to a network interface when it