1713563399.rel-27-rc1-6-g3e3f6cbe.clarify-that-cafile-is-not-set-by-default.patch 1.0 KB

12345678910111213141516171819202122232425262728
  1. Subject: Clarify that "CAFile" is not set by default
  2. Origin: rel-27-rc1-6-g3e3f6cbe
  3. Upstream-Author: Alexander Barton <alex@barton.de>
  4. Date: Fri Apr 19 23:49:59 2024 +0200
  5. --- a/doc/sample-ngircd.conf.tmpl
  6. +++ b/doc/sample-ngircd.conf.tmpl
  7. @@ -266,7 +266,8 @@
  8. # is only available when ngIRCd is compiled with support for SSL!
  9. # So don't forget to remove the ";" above if this is the case ...
  10. - # SSL Trusted CA Certificates File (for verifying peer certificates)
  11. + # SSL Trusted CA Certificates File for verifying peer certificates.
  12. + # (Default: not set; so no certificates are trusted)
  13. ;CAFile = /etc/ssl/CA/cacert.pem
  14. # Certificate Revocation File (for marking otherwise valid
  15. --- a/man/ngircd.conf.5.tmpl
  16. +++ b/man/ngircd.conf.5.tmpl
  17. @@ -387,7 +387,7 @@
  18. .TP
  19. \fBCAFile\fR (string)
  20. Filename pointing to the Trusted CA Certificates. This is required for
  21. -verifying peer certificates.
  22. +verifying peer certificates. Default: not set, so no certificates are trusted.
  23. .TP
  24. \fBCertFile\fR (string)
  25. SSL Certificate file of the private server key.