1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY VERSION "1.0">
4
5
<!ENTITY CONFNAME "mandos.conf">
5
6
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
6
<!ENTITY TIMESTAMP "2023-04-30">
7
<!ENTITY % common SYSTEM "common.ent">
7
<!ENTITY TIMESTAMP "2008-09-04">
11
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
13
12
<title>Mandos Manual</title>
14
13
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
15
14
<productname>Mandos</productname>
16
<productnumber>&version;</productnumber>
15
<productnumber>&VERSION;</productnumber>
17
16
<date>&TIMESTAMP;</date>
20
19
<firstname>Björn</firstname>
21
20
<surname>Påhlsson</surname>
23
<email>belorn@recompile.se</email>
22
<email>belorn@fukt.bsnet.se</email>
27
26
<firstname>Teddy</firstname>
28
27
<surname>Hogeborn</surname>
30
<email>teddy@recompile.se</email>
29
<email>teddy@fukt.bsnet.se</email>
47
35
<holder>Teddy Hogeborn</holder>
48
36
<holder>Björn Påhlsson</holder>
50
38
<xi:include href="legalnotice.xml"/>
54
42
<refentrytitle>&CONFNAME;</refentrytitle>
55
43
<manvolnum>5</manvolnum>
61
49
Configuration file for the Mandos server
66
54
<synopsis>&CONFPATH;</synopsis>
69
57
<refsect1 id="description">
70
58
<title>DESCRIPTION</title>
72
The file &CONFPATH; is a configuration file for
60
The file &CONFPATH; is a simple configuration file for
73
61
<citerefentry><refentrytitle>mandos</refentrytitle>
74
62
<manvolnum>8</manvolnum></citerefentry>, and is read by it at
75
63
startup. The configuration file starts with <quote><literal
145
<term><option>use_dbus<literal> = </literal>{ <literal
146
>1</literal> | <literal>yes</literal> | <literal
147
>true</literal> | <literal>on</literal> | <literal
148
>0</literal> | <literal>no</literal> | <literal
149
>false</literal> | <literal>off</literal> }</option></term>
151
<xi:include href="mandos-options.xml" xpointer="dbus"/>
156
<term><option>use_ipv6<literal> = </literal>{ <literal
157
>1</literal> | <literal>yes</literal> | <literal
158
>true</literal> | <literal>on</literal> | <literal
159
>0</literal> | <literal>no</literal> | <literal
160
>false</literal> | <literal>off</literal> }</option></term>
162
<xi:include href="mandos-options.xml" xpointer="ipv6"/>
167
<term><option>restore<literal> = </literal>{ <literal
168
>1</literal> | <literal>yes</literal> | <literal
169
>true</literal> | <literal>on</literal> | <literal
170
>0</literal> | <literal>no</literal> | <literal
171
>false</literal> | <literal>off</literal> }</option></term>
173
<xi:include href="mandos-options.xml" xpointer="restore"/>
178
<term><option>statedir<literal> = </literal><replaceable
179
>DIRECTORY</replaceable></option></term>
181
<xi:include href="mandos-options.xml" xpointer="statedir"/>
186
<term><option>socket<literal> = </literal><replaceable
187
>NUMBER</replaceable></option></term>
189
<xi:include href="mandos-options.xml" xpointer="socket"/>
229
167
# A configuration example
231
address = fe80::aede:48ff:fe71:f6f2
169
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
234
priority = SECURE128:!CTYPE-X.509:+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3:%PROFILE_ULTRA
172
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
235
173
servicename = Daena
239
statedir = /var/lib/mandos
240
174
</programlisting>
241
175
</informalexample>
244
178
<refsect1 id="see_also">
245
179
<title>SEE ALSO</title>
247
<citerefentry><refentrytitle>intro</refentrytitle>
248
<manvolnum>8mandos</manvolnum></citerefentry>,
249
181
<citerefentry><refentrytitle>gnutls_priority_init</refentrytitle
250
182
><manvolnum>3</manvolnum></citerefentry>,
251
183
<citerefentry><refentrytitle>mandos</refentrytitle>
280
212
The clients use IPv6 link-local addresses, which are
281
213
immediately usable since a link-local addresses is
282
automatically assigned to a network interface when it
214
automatically assigned to a network interfaces when it