diff options
| author |   beck <beck@openbsd.org> | 2016-11-03 12:54:16 +0000 |
|---|---|---|
| committer | beck <beck@openbsd.org> | 2016-11-03 12:54:16 +0000 |
| commit | 9d4c37a0dc681be47a4baa259eaf7f05dfccf20f (patch) | |
| tree | c8d51afec7f3a5ac422d7b19f0b50080b33d9e9e /lib/libtls/tls_init.3 | |
| parent | Use hw.ncpufound. (diff) | |
| download | wireguard-openbsd-9d4c37a0dc681be47a4baa259eaf7f05dfccf20f.tar.xz wireguard-openbsd-9d4c37a0dc681be47a4baa259eaf7f05dfccf20f.zip | |
Don't do OCSP validation when we have disabled certificate verification
or certificate validation.
ok jsing@
Diffstat (limited to 'lib/libtls/tls_init.3')
| -rw-r--r-- | lib/libtls/tls_init.3 | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/libtls/tls_init.3 b/lib/libtls/tls_init.3 index 06634efa6fb..d0b6292b4ab 100644 --- a/lib/libtls/tls_init.3 +++ b/lib/libtls/tls_init.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: tls_init.3,v 1.75 2016/11/02 18:26:14 jmc Exp $ +.\" $OpenBSD: tls_init.3,v 1.76 2016/11/03 12:54:16 beck Exp $ .\" .\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: November 2 2016 $ +.Dd $Mdocdate: November 3 2016 $ .Dt TLS_INIT 3 .Os .Sh NAME @@ -445,7 +445,7 @@ the default. clears any secret keys from memory. .It .Fn tls_config_insecure_noverifycert -disables certificate verification. +disables certificate verification and OCSP validation. Be extremely careful when using this option. .It .Fn tls_config_insecure_noverifyname @@ -453,7 +453,7 @@ disables server name verification (client only). Be careful when using this option. .It .Fn tls_config_insecure_noverifytime -disables validity checking of certificates. +disables validity checking of certificates and OCSP validation. Be careful when using this option. .It .Fn tls_config_verify |