summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2022-10-23 09:56:45 +0100
committerJeremy Harris <jgh146exb@wizmail.org>2022-10-31 17:11:42 +0000
commit4613203eae8d2dae9b877f724c52825850c105b7 (patch)
treef5b2a7c21ac89f42e2f2c4ab3dcde24fa2009c2f
parent12fb3842f81bcbd4a4519d5728f2d7e0e3ca1445 (diff)
downloadexim4-4613203eae8d2dae9b877f724c52825850c105b7.tar.gz
Docs: fix description for hosts_request_ocsp default under DANE
-rw-r--r--doc/doc-docbook/spec.xfpt8
1 files changed, 7 insertions, 1 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index af601665e..464449d24 100644
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -25607,12 +25607,18 @@ hard failure if required. See also &%hosts_try_auth%&, and chapter
&<<CHAPSMTPAUTH>>& for details of authentication.
-.option hosts_request_ocsp smtp "host list&!!" *
+.option hosts_request_ocsp smtp "host list&!!" "see below"
.cindex "TLS" "requiring for certain servers"
Exim will request a Certificate Status on a
TLS session for any host that matches this list.
&%tls_verify_certificates%& should also be set for the transport.
+.new
+The default is &"**"& if DANE is not in use for the connection,
+or if DANE-TA us used.
+It is empty if DANE-EE is used.
+.wen
+
.option hosts_require_alpn smtp "host list&!!" unset
.cindex ALPN "require negotiation in client"
.cindex TLS ALPN