[dovecot-cvs] dovecot dovecot-example.conf,1.217,1.218

[tss at dovecot.org]

Update of /var/lib/cvs/dovecot
In directory talvi:/tmp/cvs-serv416

Modified Files:
	dovecot-example.conf 
Log Message:
Updates to ssl_ca_file and ssl_username_from_cert comments in
dovecot-example.conf. Added better logging for "Invalid certificate". Patch
by HenkJan Wolthuis (hj wolthuis kaw nl)



Index: dovecot-example.conf
===================================================================
RCS file: /var/lib/cvs/dovecot/dovecot-example.conf,v
retrieving revision 1.217
retrieving revision 1.218
diff -u -d -r1.217 -r1.218
--- dovecot-example.conf	13 Oct 2006 16:37:12 -0000	1.217
+++ dovecot-example.conf	15 Oct 2006 22:07:10 -0000	1.218
@@ -95,6 +95,8 @@
 #ssl_key_password =
 
 # File containing trusted SSL certificate authorities. Usually not needed.
+# The CAfile should contain the CA-certificate(s) followed by the matching 
+# CRL(s). CRL checking is new in dovecot .rc1
 #ssl_ca_file = 
 
 # Request client to send a certificate.
@@ -902,8 +904,9 @@
   # Require a valid SSL client certificate or the authentication fails.
   #ssl_require_client_cert = no
 
-  # Take the username from client's SSL certificate, using X509_NAME_oneline()
-  # which typically uses subject's Distinguished Name.
+  # Take the username from client's SSL certificate, using 
+  # X509_NAME_get_text_by_NID() which returns the subject's DN's
+  # CommonName. 
   #ssl_username_from_cert = no
 
   # It's possible to export the authentication interface to other programs: