From: Jeremy Harris Date: Sun, 23 Oct 2022 08:56:45 +0000 (+0100) Subject: Docs: fix description for hosts_request_ocsp default under DANE X-Git-Tag: exim-4.97-RC0~229 X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/4613203eae8d2dae9b877f724c52825850c105b7 Docs: fix description for hosts_request_ocsp default under DANE --- diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index af601665e..464449d24 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -25607,12 +25607,18 @@ hard failure if required. See also &%hosts_try_auth%&, and chapter &<>& for details of authentication. -.option hosts_request_ocsp smtp "host list&!!" * +.option hosts_request_ocsp smtp "host list&!!" "see below" .cindex "TLS" "requiring for certain servers" Exim will request a Certificate Status on a TLS session for any host that matches this list. &%tls_verify_certificates%& should also be set for the transport. +.new +The default is &"**"& if DANE is not in use for the connection, +or if DANE-TA us used. +It is empty if DANE-EE is used. +.wen + .option hosts_require_alpn smtp "host list&!!" unset .cindex ALPN "require negotiation in client" .cindex TLS ALPN