diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2014-08-01 18:16:53 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2014-08-01 19:06:49 +0100 |
| commit | 043b12481513cec52c31717c8ad5248d2b344ad2 (patch) | |
| tree | 526d8c1cdce8893ed85af21a9173ab9eb490421d /doc | |
| parent | 946ecbe0c046adc421dd897b34ed5b68229bba22 (diff) | |
Basic DANE entry points
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-txt/experimental-spec.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/doc/doc-txt/experimental-spec.txt b/doc/doc-txt/experimental-spec.txt index 6657f63c7..1a786356e 100644 --- a/doc/doc-txt/experimental-spec.txt +++ b/doc/doc-txt/experimental-spec.txt @@ -1130,6 +1130,7 @@ in a router. Exim will then send the success DSN himself if requested as if the next hop does not support DSN. Adding it to a redirect router makes no difference. + Certificate name checking -------------------------------------------------------------- The X509 certificates used for TLS are supposed be verified @@ -1148,6 +1149,18 @@ a single wildcard being the initial component of a 3-or-more component FQDN). +DANE +------------------------------------------------------------ +If dane is in use the following transport options are ignored: + tls_verify_hosts + tls_try_verify_hosts + tls_verify_certificates + tls_crl + tls_verify_cert_hostnames + hosts_require_ocsp + hosts_request_ocsp + + -------------------------------------------------------------- End of file |