Next: gsasl statement, Previous: ldap statement, Up: configuration [Contents][Index]
tls
Statementtls { # Enable TLS support. enable bool; # Specify SSL certificate file. ssl-cert string; # Specify SSL certificate key file. ssl-key file; # Specify trusted CAs file. ssl-cafile file; # Set the priorities to use on the ciphers, methods, etc. ssl-priorities string; # Configure safety checks for SSL key file. key-file-safety-checks list; # Configure safety checks for SSL certificate. cert-file-safety-checks list; # Configure safety checks for SSL CA file. ca-file-safety-checks list; }
Enable TLS support. If absent, ‘enable On’ is assumed.
Specify SSL certificate file.
Specify SSL certificate key file.
Specify the trusted certificate authorities file.
Set the priorities to use on the ciphers, key exchange methods, MACs and compression methods.
Configure safety checks for SSL key file. Elements of the list are names of individual checks, optionally prefixed with ‘+’ to enable or ‘-’ to disable the corresponding check. Valid check names are:
Disable all checks.
Enable all checks.
Forbid group writable files.
Forbid world writable files.
Forbid group readable files.
Forbid world writable files.
Forbid symbolic links in group or world writable directories.
Forbid files in group writable directories.
Forbid files in world writable directories,
Configure safety checks for SSL certificate. See
key-file-safety-checks
for a description of list.
Configure safety checks for SSL CA file. See
key-file-safety-checks
for a description of list.
Next: gsasl statement, Previous: ldap statement, Up: configuration [Contents][Index]