/mandos/trunk : revision 93

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-options.xml

Committer: Teddy Hogeborn
Date: 2008-08-20 03:22:45 UTC
Revision ID: teddy@fukt.bsnet.se-20080820032245-ue341vdvzqdsg68l

* mandos (string_to_delta): Accept a whitespace-separated sequence of
                            intervals and return the sum.  This allows
                            "5m 30s" to be valid.
  (main): Provide an empty default value for the "host" option for
          "clients.conf", making it no longer a required option.

* mandos-clients.conf.xml: Removed <?xml-stylesheet>.
  (DESCRIPTION): Improved text.
  (DEFAULTS): Renamed to "OPTIONS".  Improved text for "timeout" and
              "interval".
  (CLIENTS): Removed; content moved to "OPTIONS".
  (EXPANSION): New section; document %(foo)s and %%(foo)s expansion.
  (FILES): Moved to before "EXAMPLES".
  (BUGS): New section.
  (EXAMPLES): Renamed to "EXAMPLE", as per man-pages(7).  Renamed
              example section "example_client" to "foo".  Changed
              example "host" setting to a more reasonable example host
              name.  Added additional example client "bar".

* mandos-conf.xml: Removed OVERVIEW entity.

Show diffs side-by-side

added added

removed removed

mandos-options.xml

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

<!DOCTYPE simplesect PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">

<!--

If this is specified, the server will only announce the service

and listen to requests on the specified network interface.

Default is to use all available interfaces. <emphasis

>Note:</emphasis> a failure to bind to the specified

interface is not considered critical, and the server will not

exit, but instead continue normally.

and listen to requests on network interface

<replaceable>IF</replaceable>. Default is to use all available

interfaces. <emphasis>Note:</emphasis> a failure to bind to the

specified interface is not considered critical, and the server

does not exit.

</para>

If this option is used, the server will only listen to the

specified IPv6 address. If a link-local address is specified, an

interface should be set, since a link-local address is only valid

on a single interface. By default, the server will listen to all

available addresses. If set, this must be an IPv6 address; an

IPv4 address can only be specified using IPv4-mapped IPv6 address

syntax: <quote><systemitem class="ipaddress"

>::FFFF:192.0.2.3</systemitem ></quote>.

If this option is used, the server will only listen to a specific

address. If a link-local address is specified, an interface

should be set, since a link-local address is only valid on a

single interface. By default, the server will listen to all

available addresses. Also, this must currently be an IPv6

address; an IPv4 address can only be specified using the

<quote><systemitem class="ipaddress">::FFFF:192.0.2.3</systemitem

></quote> format.

</para>

If the server is run in debug mode, it will run in the foreground

and print a lot of debugging information. The default is to

<emphasis>not</emphasis> run in debug mode.

and print a lot of debugging information. The default is

<emphasis>not</emphasis> to run in debug mode.

</para>

GnuTLS priority string for the <acronym>TLS</acronym> handshake

with the clients. The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal

></quote>. See <citerefentry>

<refentrytitle>gnutls_priority_init</refentrytitle>

<manvolnum>3</manvolnum></citerefentry> for the syntax.

<emphasis>Warning</emphasis>: changing this may make the

<acronym>TLS</acronym> handshake fail, making communication with

clients impossible.

GnuTLS priority string for the TLS handshake with the clients.

The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal></quote>.

See <citerefentry><refentrytitle>gnutls_priority_init

</refentrytitle><manvolnum>3</manvolnum></citerefentry> for the

syntax. <emphasis>Warning</emphasis>: changing this may make the

TLS handshake fail, making communication with clients impossible.

</para>

Older »