diff options
| author | Ted Unangst <tedu@cvs.openbsd.org> | 2019-08-12 19:49:15 +0000 |
|---|---|---|
| committer | Ted Unangst <tedu@cvs.openbsd.org> | 2019-08-12 19:49:15 +0000 |
| commit | 867469b9c5a58c54e98a59c602f1c99a1f18286e (patch) | |
| tree | 85df6c03ff034a226413c66ab09545c52fee8d15 | |
| parent | 01e91e0ad7efeaac318809a368d16ff0d66bb0f9 (diff) | |
instructions for replacing cert.pem are probably more harmful than helpful.
noticed by freda_bundchen. ok gilles millert
| -rw-r--r-- | share/man/man8/starttls.8 | 16 |
1 files changed, 2 insertions, 14 deletions
diff --git a/share/man/man8/starttls.8 b/share/man/man8/starttls.8 index 6f444c6f5f0..70d71d82c50 100644 --- a/share/man/man8/starttls.8 +++ b/share/man/man8/starttls.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: starttls.8,v 1.26 2018/06/27 05:39:02 jmc Exp $ +.\" $OpenBSD: starttls.8,v 1.27 2019/08/12 19:49:14 tedu Exp $ .\" .\" Copyright (c) 2001 Jose Nazario <jose@monkey.org> .\" All rights reserved. @@ -23,7 +23,7 @@ .\" OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF .\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: June 27 2018 $ +.Dd $Mdocdate: August 12 2019 $ .Dt STARTTLS 8 .Os .Sh NAME @@ -102,18 +102,6 @@ with the following command: .Pp .Dl # openssl x509 -in /etc/ssl/mail.example.com.crt -text .Pp -If you don't intend to use TLS for authentication (and if you are using -self-signed certificates you probably don't) you can simply link -your new certificate to -.Pa cert.pem : -.Pp -.Dl # ln -s /etc/ssl/mail.example.com.crt /etc/ssl/cert.pem -.Pp -If, on the other hand, you intend to use TLS for authentication -you should add your certificate authority bundle to -.Pa /etc/ssl/cert.pem -(or whatever your software expects). -.Pp Because the private key files are unencrypted, MTAs can be picky about using tight permissions on those files. The certificate directory and the files therein should be |