[Git][NTPsec/ntpsec][master] Document `openssl rehash`

[Hal Murray]

Hal Murray pushed to branch master at NTPsec / ntpsec


Commits:
b774d3b1 by Richard Laager at 2019-04-03T05:02:24Z
Document `openssl rehash`

OpenSSL root CA directories need files named by hash.

- - - - -


1 changed file:

- docs/includes/auth-commands.adoc


Changes:

=====================================
docs/includes/auth-commands.adoc
=====================================
@@ -47,9 +47,11 @@ The options are as follows:
   Read the private key to our certificate from _file_.
 
 +ca+ _location_::
-  Use the file (or directory) specified by _location_ to
+  Use the file, or directory, specified by _location_ to
   validate NTS-KE server certificates instead of the system
-  default root certificates.
+  default root certificates.  If a directory is specified, it
+  must have files named with their hash, as created by
+  +openssl rehash+.
 
 +cookie+ _location_::
   Use the file (or directory) specified by _location_ to
@@ -135,7 +137,8 @@ The following options of the +server+ command configure NTS.
 +ca+ _location_::
   Use the file, or directory, specified by _location_ to validate the
   NTS-KE server certificate, overriding the site default.  Do not use
-  any other CA.
+  any other CA.  If a directory is specified, it must have files named
+  with their hash, as created by +openssl rehash+.
 
 +aead+ _string_::
    Specify the prefered crypto algorithm to be used on the wire.



View it on GitLab: https://gitlab.com/NTPsec/ntpsec/commit/b774d3b16b4228adc98ddce72c3d222ff2244477

-- 
View it on GitLab: https://gitlab.com/NTPsec/ntpsec/commit/b774d3b16b4228adc98ddce72c3d222ff2244477
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/vc/attachments/20190403/2af7e5f6/attachment-0001.html>