diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2019-09-26 19:28:53 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2019-09-26 19:34:09 +0100 |
| commit | e326959e5e455e1b46124b023e0b202e4892e501 (patch) | |
| tree | 94df809ddf19d7eb97ec9eca348836510f832b86 /doc | |
| parent | 6219e0ec4a59a06b84eaabb6b3ae5d9e8f166672 (diff) | |
GnuTLS: full-chain OCSP stapling. Bug 1466
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-docbook/spec.xfpt | 10 | ||||
| -rw-r--r-- | doc/doc-txt/NewStuff | 2 |
2 files changed, 11 insertions, 1 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index 5acdce0a6..118b7b566 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -17836,7 +17836,15 @@ For GnuTLS 3.5.6 or later the expanded value of this option can be a list of files, to match a list given for the &%tls_certificate%& option. The ordering of the two lists must match. -The file(s) should be in DER format +.new +The file(s) should be in DER format, +except for GnuTLS 3.6.3 or later when an optional filetype prefix +can be used. The prefix must be one of "DER" or "PEM", followed by +a single space. If one is used it sets the format for subsequent +files in the list; the initial format is DER. +When a PEM format file is used it may contain multiple proofs, +for multiple certificate chain element proofs under TLS1.3. +.wen .option tls_on_connect_ports main "string list" unset .cindex SSMTP diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff index 8577f6d18..a1534c550 100644 --- a/doc/doc-txt/NewStuff +++ b/doc/doc-txt/NewStuff @@ -35,6 +35,8 @@ Version 4.93 11. Main options for DKIM verify to filter hash and key types. +12. Under GnuTLS, with TLS1.3, support for full-chain OCSP stapling. + Version 4.92 -------------- |