diff options
| author | Sam Varshavchik | 2018-10-10 23:02:33 -0400 |
|---|---|---|
| committer | Sam Varshavchik | 2018-10-10 23:02:33 -0400 |
| commit | 4d65364c5d604709c7392aaf32bb18182ef82c6c (patch) | |
| tree | e914c664a7bb1bc3711582fbcf9336dd9042e477 | |
| parent | 2e72057aef651870ffc881781de129861d4a77e4 (diff) | |
| parent | f3bf06cb9d7c75d1e4d3d89b0d7a798e9a39b29a (diff) | |
| download | courier-libs-4d65364c5d604709c7392aaf32bb18182ef82c6c.tar.bz2 | |
Merge branch 'master' of github.com:svarshavchik/courier-libs
| -rw-r--r-- | imap/imapd-ssl.dist.in.git | 3 | ||||
| -rw-r--r-- | imap/pop3d-ssl.dist.in.git | 3 | ||||
| -rw-r--r-- | tcpd/couriertls.sgml | 2 |
3 files changed, 5 insertions, 3 deletions
diff --git a/imap/imapd-ssl.dist.in.git b/imap/imapd-ssl.dist.in.git index 5204818..17f8366 100644 --- a/imap/imapd-ssl.dist.in.git +++ b/imap/imapd-ssl.dist.in.git @@ -233,7 +233,8 @@ TLS_CERTFILE=@certsdir@/imapd.pem # # TLS_PRIVATE_KEYFILE - SSL/TLS private key for decrypting peer data. # This file must be owned by the "@mailuser@" user, and must not be world -# readable. +# readable, and must be accessible without a pass-phrase, i.e. it must not +# be encrypted. # # By default, courier generates SSL/TLS certifice including private key # and install it in TLS_CERTFILE path, so TLS_PRIVATE_KEYFILE is completely diff --git a/imap/pop3d-ssl.dist.in.git b/imap/pop3d-ssl.dist.in.git index 9611524..6b5b352 100644 --- a/imap/pop3d-ssl.dist.in.git +++ b/imap/pop3d-ssl.dist.in.git @@ -227,7 +227,8 @@ TLS_CERTFILE=@certsdir@/pop3d.pem # # TLS_PRIVATE_KEYFILE - SSL/TLS private key for decrypting peer data. # This file must be owned by the "@mailuser@" user, and must not be world -# readable. +# readable, and must be accessible without a pass-phrase, i.e. it must not +# be encrypted. # # By default, courier generates SSL/TLS certifice including private key # and install it in TLS_CERTFILE path, so TLS_PRIVATE_KEYFILE is completely diff --git a/tcpd/couriertls.sgml b/tcpd/couriertls.sgml index 0711654..c7971cc 100644 --- a/tcpd/couriertls.sgml +++ b/tcpd/couriertls.sgml @@ -241,7 +241,7 @@ for SSL/TLS clients. <para> SSL/TLS private key for decrypting client data. <envar>TLS_PRIVATE_KEY</envar> is optional because <term>TLS_CERTFILE</term> is generated including cert and private key both. -<replaceable>filename</replaceable> must not be world-readable.</para> +<replaceable>filename</replaceable> must not be world-readable, and must be accessible without a pass-phrase, i.e. it must not be encrypted.</para> </listitem> </varlistentry> |