From dc4ab0a186edc8b270c8fa486104fabc567d25e7 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Thu, 8 Oct 2020 13:30:41 +0100 Subject: FreeBSD: TLS: preload configuration items --- doc/doc-docbook/spec.xfpt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'doc/doc-docbook/spec.xfpt') diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index 31c8c5653..74c9b083c 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -29308,7 +29308,7 @@ then the associated information is loaded at daemon startup. It is made available to child processes forked for handling received SMTP connections. -This caching is currently only supported under Linux. +This caching is currently only supported under Linux and FreeBSD. If caching is not possible, for example if an item has to be dependent on the peer host so contains a &$sender_host_name$& expansion, the load @@ -29320,7 +29320,7 @@ containing files specified by these options. The information specified by the main option &%tls_verify_certificates%& is similarly cached so long as it specifies files explicitly or (under GnuTLS) is the string &"system,cache"&. -The latter case is not automatically invaludated; +The latter case is not automatically invalidated; it is the operator's responsibility to arrange for a daemon restart any time the system certificate authority bundle is updated. A HUP signal is sufficient for this. -- cgit v1.2.3