diff options
| author | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-02-01 22:49:20 +0100 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-02-01 22:49:20 +0100 |
| commit | cc8e8c978cb48955417db592b799c4c65881c2b8 (patch) | |
| tree | d0611263b54a2e22d3a9553702b0d6b351397af1 /sys/man/8 | |
| parent | a291bbdeddfd41a2f0907ecbd7b819f0eedffdaf (diff) | |
tlssrv: p9any authentication support using TLS-PSK cipher suits
Diffstat (limited to 'sys/man/8')
| -rw-r--r-- | sys/man/8/tlssrv | 36 |
1 files changed, 35 insertions, 1 deletions
diff --git a/sys/man/8/tlssrv b/sys/man/8/tlssrv index 1adf30d43..35285e045 100644 --- a/sys/man/8/tlssrv +++ b/sys/man/8/tlssrv @@ -5,6 +5,16 @@ tlssrv, tlsclient, tlssrvtunnel, tlsclienttunnel \- TLS server and client .PP .B tlssrv [ +.B -D +] +[ +.B -a +[ +.B -k +.I keyspec +] +] +[ .B -c .I cert.pem ] @@ -27,6 +37,13 @@ logfile .B -D ] [ +.B -a +[ +.B -k +.I keyspec +] +] +[ .B -c .I cert.pem ] @@ -38,6 +55,10 @@ logfile .B -x .I excludedkeys ] +[ +.B -n +.I servername +] .I address .PP .B tlssrvtunnel @@ -66,6 +87,14 @@ The specified is by convention the same as for the target server. .I Remotesys is mainly used for logging. +If the +.B -a +flag is specified, +.B p9any +authentication is run before the TLS handshake and the resulting +plan9 session secret is used as a pre-shared key for TLS encryption. +This enables the use of TLS without certificates and also runs +the server command as the authorized user. .PP .I Tlsclient is the reverse of @@ -98,7 +127,12 @@ but not in the file .IR excludedkeys . See .IR thumbprint (6) -for more information. +for more information. The +.B -n +option passes the string +.I servername +in the TLS hello message (Server Name Idenfitication) +which is usefull when talking to webservers. .PP .I Tlssrvtunnel and |