[dovecot-cvs] dovecot dovecot-example.conf,1.194.2.20,1.194.2.21

tss at dovecot.org tss at dovecot.org
Sun Oct 15 23:07:11 UTC 2006


Update of /var/lib/cvs/dovecot
In directory talvi:/tmp/cvs-serv412

Modified Files:
      Tag: branch_1_0
	dovecot-example.conf 
Log Message:
Updates to ssl_ca_file and ssl_username_from_cert comments in
dovecot-example.conf. Added better logging for "Invalid certificate". Patch
by HenkJan Wolthuis (hj wolthuis kaw nl)



Index: dovecot-example.conf
===================================================================
RCS file: /var/lib/cvs/dovecot/dovecot-example.conf,v
retrieving revision 1.194.2.20
retrieving revision 1.194.2.21
diff -u -d -r1.194.2.20 -r1.194.2.21
--- dovecot-example.conf	13 Oct 2006 16:37:09 -0000	1.194.2.20
+++ dovecot-example.conf	15 Oct 2006 22:07:09 -0000	1.194.2.21
@@ -95,6 +95,8 @@
 #ssl_key_password =
 
 # File containing trusted SSL certificate authorities. Usually not needed.
+# The CAfile should contain the CA-certificate(s) followed by the matching 
+# CRL(s). CRL checking is new in dovecot .rc1
 #ssl_ca_file = 
 
 # Request client to send a certificate.
@@ -902,8 +904,9 @@
   # Require a valid SSL client certificate or the authentication fails.
   #ssl_require_client_cert = no
 
-  # Take the username from client's SSL certificate, using X509_NAME_oneline()
-  # which typically uses subject's Distinguished Name.
+  # Take the username from client's SSL certificate, using 
+  # X509_NAME_get_text_by_NID() which returns the subject's DN's
+  # CommonName. 
   #ssl_username_from_cert = no
 
   # It's possible to export the authentication interface to other programs:



More information about the dovecot-cvs mailing list