mirror of
https://github.com/openvswitch/ovs
synced 2025-10-13 14:07:02 +00:00
812560d7ce
Some of the SSL boilerplate was specific to switches, but it was included in OVSDB programs also. Make it more generic. Also document SSL options in some manpages where they were missing.
14 lines
729 B
Groff
14 lines
729 B
Groff
.IP "\fB\-\-peer\-ca\-cert=\fIpeer-cacert.pem\fR"
|
|
Specifies a PEM file that contains one or more additional certificates
|
|
to send to SSL peers. \fIpeer-cacert.pem\fR should be the CA
|
|
certificate used to sign \fB\*(PN\fR's own certificate, that is, the
|
|
certificate specified on \fB\-c\fR or \fB\-\-certificate\fR. If
|
|
\fB\*(PN\fR's certificate is self-signed, then \fB\-\-certificate\fR
|
|
and \fB\-\-peer\-ca\-cert\fR should specify the same file.
|
|
.IP
|
|
This option is not useful in normal operation, because the SSL peer
|
|
must already have the CA certificate for the peer to have any
|
|
confidence in \fB\*(PN\fR's identity. However, this offers a way for
|
|
a new installation to bootstrap the CA certificate on its first SSL
|
|
connection.
|