/mandos/trunk : revision 618

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-options.xml

Committer: Teddy Hogeborn
Date: 2013-06-23 15:13:06 UTC
Revision ID: teddy@recompile.se-20130623151306-3y4zwy76d95hcvpq

* mandos: Bug fix: Make boolean options work from the config file
          again.
          Bug fix: Make --no-ipv6 work again.
          Bug fix: Add extra magic to GnuTLS priority to make it work
          with current version of GnuTLS.
* mandos-options.xml (priority): Document new default value.
* mandos.conf (priority): - '' -
* plugins.d/mandos-client.xml (EXAMPLE): Minor grammar fix.

Show diffs side-by-side

added added

removed removed

mandos-options.xml

GnuTLS priority string for the <acronym>TLS</acronym> handshake.

The default is <quote><literal

>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal></quote>. See

<citerefentry><refentrytitle>gnutls_priority_init</refentrytitle>

>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:+SIGN-RSA-SHA224</literal></quote>.

See <citerefentry><refentrytitle

>gnutls_priority_init</refentrytitle>

<manvolnum>3</manvolnum></citerefentry> for the syntax.

<emphasis>Warning</emphasis>: changing this may make the

<acronym>TLS</acronym> handshake fail, making server-client

class="directory">/var/lib/mandos</filename></quote>.

</para>

100

101

102

If this option is used, the server will not create a new network

103

socket, but will instead use the supplied file descriptor. By

104

default, the server will create a new network socket.

105

</para>

106

107

108

This option will make the server run in the foreground and not

109

write a PID file. The default is to <emphasis>not</emphasis> run

110

in the foreground, except in <option>debug</option> mode, which

111

implies this option.

112

</para>

113

100

114

</section>

Older »