2010-06-29 14:29:40 -07:00
|
|
|
.IP "\fB\-\-peer\-ca\-cert=\fIpeer-cacert.pem\fR"
|
2009-12-21 13:10:55 -08:00
|
|
|
Specifies a PEM file that contains one or more additional certificates
|
|
|
|
|
to send to SSL peers. \fIpeer-cacert.pem\fR should be the CA
|
2010-08-16 15:59:26 -07:00
|
|
|
certificate used to sign \fB\*(PN\fR's own certificate, that is, the
|
|
|
|
|
certificate specified on \fB\-c\fR or \fB\-\-certificate\fR. If
|
|
|
|
|
\fB\*(PN\fR's certificate is self-signed, then \fB\-\-certificate\fR
|
|
|
|
|
and \fB\-\-peer\-ca\-cert\fR should specify the same file.
|
2009-12-21 13:10:55 -08:00
|
|
|
.IP
|
|
|
|
|
This option is not useful in normal operation, because the SSL peer
|
|
|
|
|
must already have the CA certificate for the peer to have any
|
2010-08-16 15:59:26 -07:00
|
|
|
confidence in \fB\*(PN\fR's identity. However, this offers a way for
|
|
|
|
|
a new installation to bootstrap the CA certificate on its first SSL
|
|
|
|
|
connection.
|