summaryrefslogtreecommitdiff
path: root/sbin/startkey
diff options
context:
space:
mode:
authorAaron Campbell <aaron@cvs.openbsd.org>2000-03-18 22:56:07 +0000
committerAaron Campbell <aaron@cvs.openbsd.org>2000-03-18 22:56:07 +0000
commit16b21db4d33ff08e914df52000c560f64ef0e39d (patch)
treea11f2d1036bb85a2c46891708f459ae9eedcd2af /sbin/startkey
parent404d4678be49dbab2ac44d8d6ae087f87036f9d6 (diff)
Remove hard sentence breaks, and some other cleanup along the way.
Diffstat (limited to 'sbin/startkey')
-rw-r--r--sbin/startkey/startkey.134
1 files changed, 22 insertions, 12 deletions
diff --git a/sbin/startkey/startkey.1 b/sbin/startkey/startkey.1
index 2253a9c05c4..39405261b3d 100644
--- a/sbin/startkey/startkey.1
+++ b/sbin/startkey/startkey.1
@@ -1,4 +1,5 @@
-.\" $OpenBSD: startkey.1,v 1.6 1999/09/23 04:12:03 alex Exp $
+.\" $OpenBSD: startkey.1,v 1.7 2000/03/18 22:56:05 aaron Exp $
+.\"
.\" Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
.\" All rights reserved.
.\"
@@ -44,14 +45,16 @@ The
.Nm
utility attempts to contact the
.Xr photurisd 8
-daemon and initialize a key exchange. The flags are:
+daemon and initialize a key exchange.
+The flags are:
.Bl -tag -width Ds
.It Fl d Ar directory
The
.Fl d
option specifies the directory in which
.Xr photurisd
-looks for its startup files. The default is
+looks for its startup files.
+The default is
.Pa /etc/photuris/ .
.El
.Pp
@@ -75,7 +78,8 @@ The port number of the destination
.Xr photuris
daemon.
.It Ic options
-The options to be used in the exchange. Possible values are
+The options to be used in the exchange.
+Possible values are
.Dq enc
and
.Dq auth .
@@ -84,10 +88,12 @@ If both
.Ic tsrc
and
.Ic tdst
-(see below) are specified, a tunnel (IP over IP) is setup. The
+(see below) are specified, a tunnel (IP over IP) is setup.
+The
.Ic tsrc
option is a network address with netmask used for matching the source
-IP address of a packet. When both the source and the destination
+IP address of a packet.
+When both the source and the destination
addresses match their respective options the packet will be routed into the
tunnel.
.It Ic tdst
@@ -95,18 +101,22 @@ If both
.Ic tsrc
(see above) and
.Ic tdst
-are specified, a tunnel (IP over IP) is setup. The
+are specified, a tunnel (IP over IP) is setup.
+The
.Ic tdst
option is a network address with netmask used for matching the destination
-IP address of a packet. When both the source and the destination
+IP address of a packet.
+When both the source and the destination
addresses match their respective options the packet will be routed into the
tunnel.
.It Ic exchange_lifetime
-Determines the lifetime of the exchange. After an exchange expires
+Determines the lifetime of the exchange.
+After an exchange expires
no new SPIs are created, which means the transport or tunnel is torn down
as soon as the current SPI times out (see
.Ic spi_lifetime
-below). The default value is gotten from the
+below).
+The default value is gotten from the
.Ic exchange_lifetime
parameter given in
.Pa photuris.conf .
@@ -114,8 +124,8 @@ If it is not given there the default is 1800 seconds.
.It Ic spi_lifetime
Determines the lifetime of each created SPI in the exchange.
.It Ic user
-The user name for whom the keying shall be done. Preconfigured
-secrets are taken from the users secret file.
+The user name for whom the keying shall be done.
+Preconfigured secrets are taken from the users secret file.
.El
.Sh EXAMPLE
startkey dst=169.200.12.23 options=auth