On Thu, Nov 05, 2015 at 02:11:06PM +0100, Jan Klemkow wrote:
> Hi,
>
> I'm playing around with client-side certificates[1] and saw that the
> manpage of tls_init.3 recommend to uses the functions:
> tls_config_set_ca_{file,path,mem} only in client context.
>
> But to check client-side certificates its also useful in server context.
>
> bye,
> Jan
>
> [1]: https://github.com/younix/ucspi/blob/master/tests.mk
>
fixed, thanks.
jmc
> Index: tls_init.3
> ===================================================================
> RCS file: /cvs/src/lib/libtls/tls_init.3,v
> retrieving revision 1.53
> diff -u -p -r1.53 tls_init.3
> --- tls_init.3 16 Oct 2015 13:49:53 -0000 1.53
> +++ tls_init.3 5 Nov 2015 12:48:17 -0000
> @@ -289,16 +289,16 @@ Configuration options may apply to only
> .Fn tls_config_set_ca_file
> sets the filename used to load a file
> containing the root certificates.
> -.Em (Client)
> +.Em (Client and Server)
> .It
> .Fn tls_config_set_ca_path
> sets the path (directory) which should be searched for root
> certificates.
> -.Em (Client)
> +.Em (Client and Server)
> .It
> .Fn tls_config_set_ca_mem
> sets the root certificates directly from memory.
> -.Em (Client)
> +.Em (Client and Server)
> .It
> .Fn tls_config_set_cert_file
> sets file from which the public certificate will be read.
>