From 4613203eae8d2dae9b877f724c52825850c105b7 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Sun, 23 Oct 2022 09:56:45 +0100 Subject: [PATCH] Docs: fix description for hosts_request_ocsp default under DANE --- doc/doc-docbook/spec.xfpt | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index af601665e..464449d24 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -25607,12 +25607,18 @@ hard failure if required. See also &%hosts_try_auth%&, and chapter &<>& for details of authentication. -.option hosts_request_ocsp smtp "host list&!!" * +.option hosts_request_ocsp smtp "host list&!!" "see below" .cindex "TLS" "requiring for certain servers" Exim will request a Certificate Status on a TLS session for any host that matches this list. &%tls_verify_certificates%& should also be set for the transport. +.new +The default is &"**"& if DANE is not in use for the connection, +or if DANE-TA us used. +It is empty if DANE-EE is used. +.wen + .option hosts_require_alpn smtp "host list&!!" unset .cindex ALPN "require negotiation in client" .cindex TLS ALPN -- 2.30.2