Next: , Previous: , Up: configuration   [Contents][Index]


3.2.19 The tls Statement

Syntax

tls {
  # Enable TLS support.
  enable bool;
  # Specify SSL certificate file.
  ssl-cert string;
  # Specify SSL certificate key file.
  ssl-key file;
  # Specify trusted CAs file.
  ssl-cafile file;
  # Set the priorities to use on the ciphers, methods, etc.
  ssl-priorities string;
  # Configure safety checks for SSL key file.
  key-file-safety-checks list;
  # Configure safety checks for SSL certificate.
  cert-file-safety-checks list;
  # Configure safety checks for SSL CA file.
  ca-file-safety-checks list;
}

Description

Configuration: enable bool

Enable TLS support. If absent, ‘enable On’ is assumed.

Configuration: ssl-cert string

Specify SSL certificate file.

Configuration: ssl-key file

Specify SSL certificate key file.

Configuration: ssl-cafile file

Specify the trusted certificate authorities file.

Configuration: ssl-priorities string

Set the priorities to use on the ciphers, key exchange methods, MACs and compression methods.

Configuration: key-file-safety-checks list

Configure safety checks for SSL key file. Elements of the list are names of individual checks, optionally prefixed with ‘+’ to enable or ‘-’ to disable the corresponding check. Valid check names are:

none

Disable all checks.

all

Enable all checks.

gwrfil

Forbid group writable files.

awrfil

Forbid world writable files.

grdfil

Forbid group readable files.

ardfil

Forbid world writable files.

linkwrdir

Forbid symbolic links in group or world writable directories.

gwrdir

Forbid files in group writable directories.

awrdir

Forbid files in world writable directories,

Configuration: cert-file-safety-checks list

Configure safety checks for SSL certificate. See key-file-safety-checks for a description of list.

Configuration: ca-file-safety-checks list

Configure safety checks for SSL CA file. See key-file-safety-checks for a description of list.


Next: , Previous: , Up: configuration   [Contents][Index]