From 705b748e8d8612385c96428ae36ed0d42a170d93 Mon Sep 17 00:00:00 2001 From: Martin Storsjö Date: Thu, 19 Sep 2013 12:30:52 +0300 Subject: tls: Add support for listen mode MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Also add options for specifying a certificate and key, which can be used both when operating as client and as server. Partially based on a patch by Peter Ross. Signed-off-by: Martin Storsjö --- doc/protocols.texi | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'doc') diff --git a/doc/protocols.texi b/doc/protocols.texi index 2c618b8e0e..1a9f5755a0 100644 --- a/doc/protocols.texi +++ b/doc/protocols.texi @@ -599,6 +599,19 @@ the host name is validated as well.) This is disabled by default since it requires a CA database to be provided by the caller in many cases. +@item cert_file +A file containing a certificate to use in the handshake with the peer. +(When operating as server, in listen mode, this is more often required +by the peer, while client certificates only are mandated in certain +setups.) + +@item key_file +A file containing the private key for the certificate. + +@item listen=@var{1|0} +If enabled, listen for connections on the provided port, and assume +the server role in the handshake instead of the client role. + @end table @section udp -- cgit v1.2.3