diff options
author | Rick Macklem <rmacklem@FreeBSD.org> | 2022-05-21 22:44:29 +0000 |
---|---|---|
committer | Rick Macklem <rmacklem@FreeBSD.org> | 2022-05-21 22:44:29 +0000 |
commit | d94358e29d1eacab17e9992ad91decb1b84b9449 (patch) | |
tree | 1d7a5655a529525da4a501a7bb1ebbd299991d5d | |
parent | 77649f35a7e53e3cbbd5b416e8802f70e21a99f6 (diff) | |
download | src-d94358e29d1eacab17e9992ad91decb1b84b9449.tar.gz src-d94358e29d1eacab17e9992ad91decb1b84b9449.zip |
rpc.tlsservd: Update the man page for the -C option
Commit 712aac1389e8 adds a new -C command line option
to rpc.tlsservd.
This patch updates the man page for this new command
line option.
This is a content change.
Reviewed by: jhb, pauamma_gundo.com
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D35136
-rw-r--r-- | usr.sbin/rpc.tlsservd/rpc.tlsservd.8 | 22 |
1 files changed, 21 insertions, 1 deletions
diff --git a/usr.sbin/rpc.tlsservd/rpc.tlsservd.8 b/usr.sbin/rpc.tlsservd/rpc.tlsservd.8 index 9e1c78220884..5a1548235f5c 100644 --- a/usr.sbin/rpc.tlsservd/rpc.tlsservd.8 +++ b/usr.sbin/rpc.tlsservd/rpc.tlsservd.8 @@ -26,7 +26,7 @@ .\" $FreeBSD$ .\" .\" Modified from gssd.8 for rpc.tlsservd.8 by Rick Macklem. -.Dd January 29, 2021 +.Dd May 17, 2022 .Dt RPC.TLSSERVD 8 .Os .Sh NAME @@ -34,6 +34,7 @@ .Nd "Sun RPC over TLS Server Daemon" .Sh SYNOPSIS .Nm +.Op Fl C Ar available_ciphers .Op Fl D Ar certdir .Op Fl d .Op Fl h @@ -140,6 +141,24 @@ option has been specified. .Pp The options are as follows: .Bl -tag -width indent +.It Fl C Ar available_ciphers , Fl Fl ciphers= Ns Ar available_ciphers +Specify which ciphers are available during TLS handshake. +If this option is specified, +.Dq SSL_CTX_set_ciphersuites() +will be called with +.Dq available_ciphers +as the argument. +If this option is not specified, the cipher will be chosen by +.Xr ssl 7 , +which should be adequate for most cases. +The format for the available ciphers is a simple +.So +: +.Sc +separated list, in order of preference. +The command +.Dq openssl ciphers -s -tls1_3 +lists available ciphers. .It Fl D Ar certdir , Fl Fl certdir= Ns Ar certdir Use .Dq certdir @@ -324,6 +343,7 @@ options is allowed. .Xr openssl 1 , .Xr ktls 4 , .Xr exports 5 , +.Xr ssl 7 , .Xr mount_nfs 8 , .Xr nfsuserd 8 , .Xr rpc.tlsclntd 8 , |