From: Howard Chu <hyc@openldap.org>
Date: Fri, 28 Oct 2005 05:42:56 +0000 (+0000)
Subject: ITS#4017 add TLSDHParamFile
X-Git-Tag: OPENLDAP_REL_ENG_2_2_MP~180
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=1e52928337209e20de0879637acceea35d5b0303;p=openldap

ITS#4017 add TLSDHParamFile
---

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 55e0012c32..2ff81bbcbc 100644
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -908,6 +908,12 @@ server private key that matches the certificate stored in the
 file.  Currently, the private key must not be protected with a password, so
 it is of critical importance that it is protected carefully. 
 .TP
+.B TLSDHParamFile <filename>
+This directive specifies the file that contains parameters for Diffie-Hellman
+ephemeral key exchange.  This is required in order to use a DSA certificate on
+the server. If multiple sets of parameters are present in the file, all of
+them will be processed.
+.TP
 .B TLSRandFile <filename>
 Specifies the file to obtain random bits from when /dev/[u]random
 is not available.  Generally set to the name of the EGD/PRNGD socket.