1 From 26c18423ab3b7e9100ea915b175c40ed7345df74 Mon Sep 17 00:00:00 2001
2 From: babak sarashki <babak.sarashki@windriver.com>
3 Date: Wed, 4 Dec 2019 08:03:25 -0800
4 Subject: [PATCH] openldap man tls reqcert
6 From stx 1901: openldap-man-tls-reqcert.patch
7 From f7027b3118ea90d616d0ddeeb348f15ba91cd08b
9 doc/man/man5/ldap.conf.5 | 18 ++++++++----------
10 1 file changed, 8 insertions(+), 10 deletions(-)
12 diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
13 index 49f1830a0..313b9c275 100644
14 --- a/doc/man/man5/ldap.conf.5
15 +++ b/doc/man/man5/ldap.conf.5
16 @@ -433,8 +433,8 @@ The environment variable RANDFILE can also be used to specify the filename.
17 This parameter is ignored with GnuTLS and Mozilla NSS.
19 .B TLS_REQCERT <level>
20 -Specifies what checks to perform on server certificates in a TLS session,
22 +Specifies what checks to perform on server certificates in a TLS session.
25 can be specified as one of the following keywords:
27 @@ -443,19 +443,17 @@ can be specified as one of the following keywords:
28 The client will not request or check any server certificate.
31 -The server certificate is requested. If no certificate is provided,
32 -the session proceeds normally. If a bad certificate is provided, it will
33 +The server certificate is requested. If a bad certificate is provided, it will
34 be ignored and the session proceeds normally.
37 -The server certificate is requested. If no certificate is provided,
38 -the session proceeds normally. If a bad certificate is provided,
39 -the session is immediately terminated.
40 +The server certificate is requested. If a bad certificate is provided, the
41 +session is immediately terminated.
44 -These keywords are equivalent. The server certificate is requested. If no
45 -certificate is provided, or a bad certificate is provided, the session
46 -is immediately terminated. This is the default setting.
47 +These keywords are equivalent and semantically same as
49 +This is the default setting.
52 .B TLS_CRLCHECK <level>